CVE-2018-18386 : drivers/tty/n_tty.c in the Linux kernel before 4.14.11 allows local attackers (w

drivers/tty/n_tty.c in the Linux kernel before 4.14.11 allows local attackers (who are able to access pseudo terminals) to hang/block further usage of any pseudo terminal devices due to an EXTPROC versus ICANON confusion in TIOCINQ.

Published 2018-10-17 20:29:01

Updated 2019-04-23 17:29:05

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2018-18386

Linux » Linux Kernel
Versions before (<) 4.14.11
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Matching versions
Canonical » Ubuntu Linux » Version: 14.04 LTS Edition
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
Matching versions
Canonical » Ubuntu Linux » Version: 12.04 ESM Edition
cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2018-18386

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 6 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2018-18386

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
2.1	LOW	AV:L/AC:L/Au:N/C:N/I:N/A:P	3.9	2.9	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Partial
3.3	LOW	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L	1.8	1.4	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: Low

CWE ids for CVE-2018-18386

CWE-704 Incorrect Type Conversion or Cast

The product does not correctly convert an object, resource, or structure from one type to a different type.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2018-18386

https://bugzilla.suse.com/show_bug.cgi?id=1094825

Bug 1094825 – VUL-0: CVE-2018-18386: kernel-source: hangs after a pseudoterminal is put in both ICANON and EXTPROC mode (LTP pty02)
Issue Tracking;Patch;Third Party Advisory
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.11

Release Notes;Patch;Third Party Advisory

CVEs referencing this url
https://usn.ubuntu.com/3849-1/

USN-3849-1: Linux kernel vulnerabilities | Ubuntu security notices
Third Party Advisory

CVEs referencing this url
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=966031f340185eddd05affcf72b740549f056348

kernel/git/torvalds/linux.git - Linux kernel source tree
Patch;Vendor Advisory
https://access.redhat.com/errata/RHSA-2019:0831

RHSA-2019:0831 - Security Advisory - Red Hat Customer Portal

CVEs referencing this url
https://github.com/torvalds/linux/commit/966031f340185eddd05affcf72b740549f056348

n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD) · torvalds/linux@966031f · GitHub
Patch;Third Party Advisory
https://usn.ubuntu.com/3849-2/

USN-3849-2: Linux kernel (Trusty HWE) vulnerabilities | Ubuntu security notices
Third Party Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2018-18386

Products affected by CVE-2018-18386

Exploit prediction scoring system (EPSS) score for CVE-2018-18386

CVSS scores for CVE-2018-18386

CWE ids for CVE-2018-18386

References for CVE-2018-18386