CVE-2018-1000199 — MEDIUM (5.5)

Vulnerability Description

The Linux Kernel version 3.18 contains a dangerous feature vulnerability in modify_user_hw_breakpoint() that can result in crash and possibly memory corruption. This attack appear to be exploitable via local code execution and the ability to use ptrace. This vulnerability appears to have been fixed in git commit f67b15037a7a50c57f72e69a6d59941ad90a0f0f.

CVSS Score

5.5

MEDIUM

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

NONE

Integrity

NONE

Availability

HIGH

Affected Products

Vendor	Product	Versions
Debian	Debian Linux	7.0
Linux	Linux Kernel	3.18
Canonical	Ubuntu Linux	12.04
Redhat	Enterprise Linux	7.0
Redhat	Enterprise Linux Desktop	7.0
Redhat	Enterprise Linux Server	7.0
Redhat	Enterprise Linux Server Aus	7.2
Redhat	Enterprise Linux Server Eus	7.3
Redhat	Enterprise Linux Server Tus	7.2
Redhat	Enterprise Linux Workstation	7.0

Related Weaknesses (CWE)

CWE-119

References

http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html
http://www.securitytracker.com/id/1040806Third Party AdvisoryVDB Entry
https://access.redhat.com/errata/RHSA-2018:1318Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:1345Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:1347Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:1348Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:1354Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:1355Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:1374Third Party Advisory
https://lists.debian.org/debian-lts-announce/2018/05/msg00000.htmlThird Party Advisory
https://lkml.org/lkml/2018/4/6/813Mailing ListPatchThird Party Advisory
https://usn.ubuntu.com/3641-1/Third Party Advisory
https://usn.ubuntu.com/3641-2/Third Party Advisory
https://www.debian.org/security/2018/dsa-4187Third Party Advisory
https://www.debian.org/security/2018/dsa-4188Third Party Advisory

FAQ

What is CVE-2018-1000199?

CVE-2018-1000199 is a vulnerability with a CVSS score of 5.5 (MEDIUM). The Linux Kernel version 3.18 contains a dangerous feature vulnerability in modify_user_hw_breakpoint() that can result in crash and possibly memory corruption. This attack appear to be exploitable vi...

How severe is CVE-2018-1000199?

CVE-2018-1000199 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2018-1000199?

Check the references section above for vendor advisories and patch information. Affected products include: Debian Debian Linux, Linux Linux Kernel, Canonical Ubuntu Linux, Redhat Enterprise Linux, Redhat Enterprise Linux Desktop.