CVE-2018-16658 - CERT CVE
ID CVE-2018-16658
Sažetak An issue was discovered in the Linux kernel before 4.18.6. An information leak in cdrom_ioctl_drive_status in drivers/cdrom/cdrom.c could be used by local attackers to read kernel memory because a cast from unsigned long to int interferes with bounds checking. This is similar to CVE-2018-10940.
Reference
CVSS
Base: 3.6
Impact: 4.9
Exploitability:3.9
Pristup
VektorSloženostAutentikacija
LOCAL LOW NONE
Impact
PovjerljivostCjelovitostDostupnost
PARTIAL NONE PARTIAL
CVSS vektor AV:L/AC:L/Au:N/C:P/I:N/A:P
Zadnje važnije ažuriranje 06-08-2019 - 17:15
Objavljeno 07-09-2018 - 14:29