CVE-2018-11506Out-of-bounds Write in Kernel

Severity
7.8HIGHNVD
OSV5.5
EPSS
0.1%
top 76.97%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedMay 28
Latest updateMay 13

Description

The sr_do_ioctl function in drivers/scsi/sr_ioctl.c in the Linux kernel through 4.16.12 allows local users to cause a denial of service (stack-based buffer overflow) or possibly have unspecified other impact because sense buffers have different sizes at the CDROM layer and the SCSI layer, as demonstrated by a CDROMREADMODE2 ioctl call.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages4 packages

NVDlinux/linux_kernel4.114.14.45+1
Debianlinux/linux_kernel< 4.16.16-1+3
Ubuntulinux/linux_kernel< 4.15.0-33.36
debiandebian/linux< linux 4.16.16-1 (bookworm)

Also affects: Debian Linux 8.0, Ubuntu Linux 16.04, 18.04

Patches

🔴Vulnerability Details

5
GHSA
GHSA-gq53-r8v6-47q9: The sr_do_ioctl function in drivers/scsi/sr_ioctl2022-05-13
OSV
linux-azure, linux-oem, linux-gcp vulnerabilities2018-08-28
OSV
linux, linux-aws, linux-gcp, linux-kvm, linux-raspi2 vulnerabilities2018-08-24
OSV
linux-hwe vulnerabilities2018-08-24
OSV
CVE-2018-11506: The sr_do_ioctl function in drivers/scsi/sr_ioctl2018-05-28

📋Vendor Advisories

5
Ubuntu
Linux kernel (Azure, GCP, OEM) vulnerabilities2018-08-28
Ubuntu
Linux kernel vulnerabilities2018-08-24
Ubuntu
Linux kernel (HWE) vulnerabilities2018-08-24
Red Hat
kernel: Stack-based buffer overflow in drivers/scsi/sr_ioctl.c allows denial of service or other unspecified impact2018-05-21
Debian
CVE-2018-11506: linux - The sr_do_ioctl function in drivers/scsi/sr_ioctl.c in the Linux kernel through ...2018

💬Community

4
Bugzilla
CVE-2019-5747 busybox: Out of bounds read in udhcp components resulting in information disclosure2019-01-17
Bugzilla
CVE-2018-20679 busybox: Out of bounds read in udhcp components resulting in information disclosure2019-01-16
Bugzilla
CVE-2018-11506 kernel: Stack-based buffer overflow in drivers/scsi/sr_ioctl.c allows denial of service or other unspecified impact2018-05-28
Bugzilla
CVE-2018-11506 kernel: Stack-based buffer overflow in drivers/scsi/sr_ioctl.c allows denial of service or other unspecified impact [fedora-all]2018-05-28