CVE - CVE-2018-10882

CVE-ID
CVE-2018-10882	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bound write in in fs/jbd2/transaction.c code, a denial of service, and a system crash by unmounting a crafted ext4 filesystem image.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:106503 URL:http://www.securityfocus.com/bid/106503 MISC:RHSA-2018:2948 URL:https://access.redhat.com/errata/RHSA-2018:2948 MISC:USN-3753-1 URL:https://usn.ubuntu.com/3753-1/ MISC:USN-3753-2 URL:https://usn.ubuntu.com/3753-2/ MISC:USN-3871-1 URL:https://usn.ubuntu.com/3871-1/ MISC:USN-3871-3 URL:https://usn.ubuntu.com/3871-3/ MISC:USN-3871-4 URL:https://usn.ubuntu.com/3871-4/ MISC:USN-3871-5 URL:https://usn.ubuntu.com/3871-5/ MISC:[debian-lts-announce] 20180718 [SECURITY] [DLA 1423-1] linux-4.9 new package URL:https://lists.debian.org/debian-lts-announce/2018/07/msg00020.html MISC:https://bugzilla.kernel.org/show_bug.cgi?id=200069 URL:https://bugzilla.kernel.org/show_bug.cgi?id=200069 MISC:https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10882 URL:https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10882 MISC:https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c37e9e013469521d9adb932d17a1795c139b36db URL:https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c37e9e013469521d9adb932d17a1795c139b36db
Assigning CNA
Red Hat, Inc.
Date Record Created
20180509	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20180509)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)