cbcvebase.
CVE-2018-10883
published 2018-07-30

CVE-2018-10883: A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bounds write in jbd2_journal_dirty_metadata(), a denial of service…

PriorityP422medium5.5CVSS 3.0
AVLACLPRLUINSUCNINAH
EPSS
0.53%
41.8th percentile
A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bounds write in jbd2_journal_dirty_metadata(), a denial of service, and a system crash by mounting and operating on a crafted ext4 filesystem image.

Affected

18 ranges
VendorProductVersion rangeFixed in
canonicalubuntu_linux
canonicalubuntu_linux
canonicalubuntu_linux
debiandebian_linux
debianlinux< linux 4.17.3-1 (bookworm)linux 4.17.3-1 (bookworm)
googleandroid
linuxlinux_kernel< 4.9.1104.9.110
linuxlinux_kernel>= 0 < 4.17.3-14.17.3-1
linuxlinux_kernel>= 0 < 4.17.3-14.17.3-1
linuxlinux_kernel>= 0 < 4.17.3-14.17.3-1
linuxlinux_kernel>= 0 < 4.17.3-14.17.3-1
linuxlinux_kernel>= 0 < 4.4.0-142.1684.4.0-142.168
linuxlinux_kernel>= 0 < 4.15.0-44.474.15.0-44.47
linuxlinux_kernel>= 0 < 4.15.0-45.484.15.0-45.48
redhatenterprise_linux
redhatenterprise_linux_desktop
redhatenterprise_linux_server
redhatenterprise_linux_workstation

CVSS provenance

nvdv3.05.5MEDIUMCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
nvdv2.04.9MEDIUMAV:L/AC:L/Au:N/C:N/I:N/A:C
osv5.5MEDIUM
vendor_ubuntu5.0MEDIUM
vendor_debian4.8MEDIUM
vendor_redhat4.8MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.