CVE-2018-20169 : An issue was discovered in the Linux kernel before 4.19.9. The USB subsystem mis

An issue was discovered in the Linux kernel before 4.19.9. The USB subsystem mishandles size checks during the reading of an extra descriptor, related to __usb_get_extra_descriptor in drivers/usb/core/usb.c.

Published 2018-12-17 07:29:01

Updated 2024-03-04 22:59:10

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2018-20169

Debian » Debian Linux » Version: 8.0
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel
Versions from including (>=) 4.5 and before (<) 4.9.145
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel
Versions from including (>=) 4.15 and before (<) 4.19.9
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel
Versions from including (>=) 4.10 and before (<) 4.14.88
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel
Versions from including (>=) 3.19 and before (<) 4.4.167
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel
Versions before (<) 3.16.63
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel
Versions from including (>=) 3.17 and before (<) 3.18.129
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Matching versions
Canonical » Ubuntu Linux » Version: 14.04 LTS Edition
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
Matching versions
Canonical » Ubuntu Linux » Version: 16.04 LTS Edition
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2018-20169

EPSS FAQ

0.08%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 25 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2018-20169

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.2	HIGH	AV:L/AC:L/Au:N/C:C/I:C/A:C	3.9	10.0	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete
6.8	MEDIUM	CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	0.9	5.9	NIST
Attack Vector: Physical Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High
6.8	MEDIUM	CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	0.9	5.9	NIST	2024-02-15
Attack Vector: Physical Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2018-20169

CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2018-20169

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=704620afc70cf47abb9d6a1a57f3825d2bca49cf

kernel/git/torvalds/linux.git - Linux kernel source tree
Mailing List;Patch;Vendor Advisory
https://usn.ubuntu.com/4094-1/

USN-4094-1: Linux kernel vulnerabilities | Ubuntu security notices
Third Party Advisory;VDB Entry

CVEs referencing this url
https://usn.ubuntu.com/4118-1/

USN-4118-1: Linux kernel (AWS) vulnerabilities | Ubuntu security notices
Third Party Advisory;VDB Entry

CVEs referencing this url
https://access.redhat.com/errata/RHSA-2019:3517

RHSA-2019:3517 - Security Advisory - Red Hat Customer Portal
Third Party Advisory;VDB Entry

CVEs referencing this url
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.9

Mailing List;Patch;Vendor Advisory
https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html

[SECURITY] [DLA 1731-2] linux regression update
Mailing List;Third Party Advisory

CVEs referencing this url
https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html

[SECURITY] [DLA 1731-1] linux security update
Mailing List;Third Party Advisory

CVEs referencing this url
https://lists.debian.org/debian-lts-announce/2019/05/msg00002.html

[SECURITY] [DLA 1771-1] linux-4.9 security update
Mailing List;Third Party Advisory

CVEs referencing this url
https://usn.ubuntu.com/3879-2/

USN-3879-2: Linux kernel (Xenial HWE) vulnerabilities | Ubuntu security notices
Third Party Advisory

CVEs referencing this url
https://usn.ubuntu.com/3879-1/

USN-3879-1: Linux kernel vulnerabilities | Ubuntu security notices
Third Party Advisory

CVEs referencing this url
https://access.redhat.com/errata/RHSA-2019:3309

RHSA-2019:3309 - Security Advisory - Red Hat Customer Portal
Third Party Advisory;VDB Entry

CVEs referencing this url
https://github.com/torvalds/linux/commit/704620afc70cf47abb9d6a1a57f3825d2bca49cf

USB: check usb_get_extra_descriptor for proper size · torvalds/linux@704620a · GitHub
Patch;Third Party Advisory

Jump to

Vulnerability Details : CVE-2018-20169

Products affected by CVE-2018-20169

Exploit prediction scoring system (EPSS) score for CVE-2018-20169

CVSS scores for CVE-2018-20169

CWE ids for CVE-2018-20169

References for CVE-2018-20169