CVE-2018-11506 — Out-of-bounds Write in Kernel
Severity
7.8HIGHNVD
OSV5.5
EPSS
0.1%
top 76.97%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMay 28
Latest updateMay 13
Description
The sr_do_ioctl function in drivers/scsi/sr_ioctl.c in the Linux kernel through 4.16.12 allows local users to cause a denial of service (stack-based buffer overflow) or possibly have unspecified other impact because sense buffers have different sizes at the CDROM layer and the SCSI layer, as demonstrated by a CDROMREADMODE2 ioctl call.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9
Affected Packages4 packages
Also affects: Debian Linux 8.0, Ubuntu Linux 16.04, 18.04
Patches
🔴Vulnerability Details
5📋Vendor Advisories
5💬Community
4Bugzilla▶
CVE-2019-5747 busybox: Out of bounds read in udhcp components resulting in information disclosure↗2019-01-17
Bugzilla▶
CVE-2018-20679 busybox: Out of bounds read in udhcp components resulting in information disclosure↗2019-01-16
Bugzilla▶
CVE-2018-11506 kernel: Stack-based buffer overflow in drivers/scsi/sr_ioctl.c allows denial of service or other unspecified impact↗2018-05-28
Bugzilla▶
CVE-2018-11506 kernel: Stack-based buffer overflow in drivers/scsi/sr_ioctl.c allows denial of service or other unspecified impact [fedora-all]↗2018-05-28