Vulnetix
Try Vulnetix Request Demo
CVE-2018-13095 PUBLISHED

An issue was discovered in fs/xfs/libxfs/xfs_inode_buf.c in the Linux kernel through 4.17.3. A denial of service (memory corruption and BUG) can occur for a corrupted xfs image upon encountering an inode that is in extent format, but has more extents than fit in the inode fork.

EPSS 0.30% · 53.2th percentile

Risk Scores

EPSS Score
0.30%
53.2th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:14.04:LTSlinux-aws4.4.0-1019.19, 4.4.0-1017.17, 4.4.0-1016.16
Ubuntu:16.04:LTSlinux-raspi24.4.0-1134.143, 4.4.0-1136.145, 4.4.0-1137.146
Ubuntu:Pro:FIPS-updates:18.04:LTSlinux-aws-fips4.15.0-2027.27, 4.15.0-2031.32, 4.15.0-2033.34
Ubuntu:Pro:FIPS:18.04:LTSlinux-fips0, 4.15.0-1011.12
Ubuntu:18.04:LTSlinux-azure4.15.0-1030.31, 4.15.0-1012.12, 4.15.0-1028.29
Ubuntu:16.04:LTSlinux-aws4.4.0-1057.66, 4.4.0-1055.64, 4.4.0-1054.63
Ubuntu:Pro:FIPS:18.04:LTSlinux-gcp-fips4.15.0-1001.1, 0
Ubuntu:16.04:LTSlinux-gcp4.15.0-1094.107~16.04.1, 4.15.0-1093.106~16.04.1, 4.15.0-1092.105~16.04.1
Ubuntu:Pro:FIPS:18.04:LTSlinux-azure-fips4.15.0-1002.2, 0
Ubuntu:Pro:FIPS-updates:18.04:LTSlinux-fips4.15.0-1038.43, 4.15.0-1056.64, 4.15.0-1055.63
Ubuntu:Pro:14.04:LTSlinux3.13.0-181.232, 3.13.0-182.233, 3.13.0-183.234
Ubuntu:18.04:LTSlinux-oracle0, 4.15.0-1007.9, 4.15.0-1008.10
Ubuntu:18.04:LTSlinux-oem0, 4.15.0-1002.3, 4.15.0-1004.5
Ubuntu:Pro:FIPS:16.04:LTSlinux-fips4.4.0-1023.28, 0, 4.4.0-1003.3
Ubuntu:18.04:LTSlinux-azure-4.154.15.0-1092.102, 4.15.0-1089.99, 4.15.0-1083.93
Ubuntu:Pro:FIPS:18.04:LTSlinux-aws-fips0, 4.15.0-2000.4
Ubuntu:16.04:LTSlinux-hwe-edge4.10.0-21.23~16.04.1, 4.10.0-19.21~16.04.1, 4.10.0-14.16~16.04.1
Ubuntu:18.04:LTSlinux-gke-4.154.15.0-1063.66, 4.15.0-1059.62, 4.15.0-1058.61
Ubuntu:Pro:14.04:LTSlinux-lts-xenial4.4.0-135.161~14.04.1, 4.4.0-204.236~14.04.1, 4.4.0-206.238~14.04.1
Ubuntu:18.04:LTSlinux-gcp4.15.0-1015.15, 4.15.0-1014.14, 4.15.0-1044.70

…and 22 more

Timeline

References

Open in Interactive Console →