VDB
CVE-2018-13100
CVE-2018-13100
PUBLISHED
CVSS 5.5 MEDIUM
An issue was discovered in fs/f2fs/super.c in the Linux kernel through 4.17.3, which does not properly validate secs_per_zone in a corrupted f2fs image, as demonstrated by a divide-by-zero error.
EPSS 2.32% · 83.3th percentile
Risk Scores
CVSS 3.0
5.5
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS Score
2.32%
83.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ubuntu:18.04:LTS | linux-gcp | 4.15.0-1026.27, 4.15.0-1019.20, 4.15.0-1027.28 |
| Ubuntu:Pro:FIPS:18.04:LTS | linux-azure-fips | 0, 4.15.0-1002.2 |
| Ubuntu:Pro:FIPS:18.04:LTS | linux-gcp-fips | 0, 4.15.0-1001.1 |
| Ubuntu:20.04:LTS | linux-gke | 5.4.0-1074.79, 5.4.0-1072.77, 5.4.0-1071.76 |
| Ubuntu:22.04:LTS | linux-intel-iot-realtime | 5.15.0-1073.75, 0 |
| Ubuntu:16.04:LTS | linux | 4.4.0-128.154, 4.4.0-104.127, 4.4.0-101.124 |
| Ubuntu:Pro:14.04:LTS | linux-azure | 4.15.0-1056.61~14.04.1, 4.15.0-1052.57~14.04.1, 4.15.0-1049.54~14.04.1 |
| Ubuntu:22.04:LTS | linux-realtime | 5.15.0-1032.35, 0 |
| Ubuntu:Pro:FIPS:18.04:LTS | linux-aws-fips | 4.15.0-2000.4, 0 |
| Ubuntu:18.04:LTS | linux-oem | 4.15.0-1018.21, 4.15.0-1028.33, 4.15.0-1009.12 |
| Ubuntu:20.04:LTS | linux-riscv | 5.4.0-34.38, 0, 5.4.0-24.28 |
| Ubuntu:Pro:14.04:LTS | linux | 3.13.0-208.259, 3.13.0-67.110, 3.13.0-68.111 |
| Ubuntu:16.04:LTS | linux-oracle | 0, 4.15.0-1007.9~16.04.1, 4.15.0-1008.10~16.04.1 |
| Ubuntu:20.04:LTS | linux-azure-fde | 5.4.0-1089.94+cvm1.2, 5.4.0-1090.95+cvm1.1, 5.4.0-1091.96+cvm1.1 |
| Ubuntu:18.04:LTS | linux-oracle | 4.15.0-1008.10, 4.15.0-1018.20, 4.15.0-1015.17 |
| Ubuntu:18.04:LTS | linux-kvm | 4.15.0-1016.16, 4.15.0-1012.12, 4.15.0-1011.11 |
| Ubuntu:18.04:LTS | linux-aws | 4.15.0-1033.35, 4.15.0-1031.33, 4.15.0-1029.30 |
| Ubuntu:16.04:LTS | linux-gcp | 4.10.0-1007.7, 0, 4.10.0-1006.6 |
| Ubuntu:16.04:LTS | linux-snapdragon | 4.4.0-1096.101, 4.4.0-1020.23, 0 |
| Ubuntu:16.04:LTS | linux-aws-hwe | 4.15.0-1030.31~16.04.1, 4.15.0-1031.33~16.04.1, 4.15.0-1032.34~16.04.1 |
…and 18 more
Timeline
- Jul 3, 2018 CVE Published
- Apr 14, 2021 EPSS Score
- Jun 23, 2021 EPSS Score
- Oct 28, 2021 EPSS Score
- Dec 30, 2021 EPSS Score
- Feb 4, 2022 EPSS Score
- May 5, 2022 EPSS Score
- Jul 7, 2022 EPSS Score
- Sep 9, 2022 EPSS Score
- Nov 12, 2022 EPSS Score
- Mar 7, 2023 EPSS Score
- Mar 18, 2023 EPSS Score
References
- https://ubuntu.com/security/CVE-2018-13100 advisory
- https://ubuntu.com/security/notices/USN-3932-1 advisory
- https://ubuntu.com/security/notices/USN-3932-2 advisory
- https://ubuntu.com/security/notices/USN-4094-1 advisory
- https://bugzilla.kernel.org/show_bug.cgi?id=200183 third-party-advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/chao/linux.git/commit/?h=f2fs-dev&id=977f9bb558cb4a95d53b10301f5c739ed8867d4d third-party-advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/jaegeuk/f2fs.git/commit/?h=dev&id=42bf546c1fe3f3654bdf914e977acbc2b80a5be5 third-party-advisory
- https://www.cve.org/CVERecord?id=CVE-2018-13100 third-party-advisory
- https://ubuntu.com/security/notices/USN-4118-1 advisory