cbcvebase.
CVE-2018-12896
published 2018-07-02

CVE-2018-12896: An issue was discovered in the Linux kernel through 4.17.3. An Integer Overflow in kernel/time/posix-timers.c in the POSIX timer code is caused by the way the…

PriorityP419medium5.5CVSS 3.0
AVLACLPRLUINSUCNINAH
EPSS
0.64%
47.1th percentile
An issue was discovered in the Linux kernel through 4.17.3. An Integer Overflow in kernel/time/posix-timers.c in the POSIX timer code is caused by the way the overrun accounting works. Depending on interval and expiry time values, the overrun can be larger than INT_MAX, but the accounting is int based. This basically makes the accounting values, which are visible to user space via timer_getoverrun(2) and siginfo::si_overrun, random. For example, a local user can cause a denial of service (signed integer overflow) via crafted mmap, futex, timer_create, and timer_settime system calls.

Affected

14 ranges
VendorProductVersion rangeFixed in
canonicalubuntu_linux
canonicalubuntu_linux
canonicalubuntu_linux
canonicalubuntu_linux
debiandebian_linux
debianlinux< linux 4.18.20-1 (bookworm)linux 4.18.20-1 (bookworm)
linuxlinux_kernel<= 4.17.3
linuxlinux_kernel>= 0 < 4.18.20-14.18.20-1
linuxlinux_kernel>= 0 < 4.18.20-14.18.20-1
linuxlinux_kernel>= 0 < 4.18.20-14.18.20-1
linuxlinux_kernel>= 0 < 4.18.20-14.18.20-1
linuxlinux_kernel>= 0 < 3.13.0-164.2143.13.0-164.214
linuxlinux_kernel>= 0 < 4.4.0-141.1674.4.0-141.167
linuxlinux_kernel>= 0 < 4.15.0-43.464.15.0-43.46

CVSS provenance

nvdv3.05.5MEDIUMCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
nvdv2.02.1LOWAV:L/AC:L/Au:N/C:N/I:N/A:P
osv9.8CRITICAL
vendor_ubuntu9.8CRITICAL
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.