Description
UDisks 2.8.0 has a format string vulnerability in udisks_log in udiskslogging.c, allowing attackers to obtain sensitive information (stack contents), cause a denial of service (memory corruption), or possibly have unspecified other impact via a malformed filesystem label, as demonstrated by %d or %n substrings.
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9Attack Vector: Local
Complexity: Low
Privileges: Low
User Interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: High
Availability: High
Affected Packages1 packages
Also affects: Ubuntu Linux 18.04
🔴Vulnerability Details
3GHSAGHSA-wc77-2q7w-jfm4: UDisks 2↗2022-05-14 CVEListCVE-2018-17336: UDisks 2↗2018-09-22 OSVCVE-2018-17336: UDisks 2↗2018-09-22 📋Vendor Advisories
3UbuntuUDisks vulnerability↗2018-09-26 Red Hatudisks: Format string vulnerability in udisks_log in udiskslogging.c↗2018-09-22 DebianCVE-2018-17336: udisks2 - UDisks 2.8.0 has a format string vulnerability in udisks_log in udiskslogging.c,...↗2018 💬Community
3BugzillaCVE-2018-17336 udisks: Format string vulnerability in udisks_log in udiskslogging.c↗2018-09-25 BugzillaCVE-2018-17336 udisks2: udisks: Format string vulnerability in udisks_log in udiskslogging.c [fedora-all]↗2018-09-25 BugzillaCVE-2018-17336 udisks: Format string vulnerability in udisks_log in udiskslogging.c [fedora-all]↗2018-09-25