CVE-2018-14656 | Vulnetix

CVE-2018-14656 PUBLISHED CVSS 7 HIGH

A missing address check in the callers of the show_opcodes() in the Linux kernel allows an attacker to dump the kernel memory at an arbitrary kernel address into the dmesg log.

EPSS 0.53% · 42.7th percentile

Risk Scores

CVSS 3.0

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Score

0.53%

42.7th percentile

Affected Products

Vendor	Product	Versions
[UNKNOWN]	kernel	n/a
linux	linux_kernel	0, 4.19

Timeline

Oct 8, 2018 CVE Published
Apr 14, 2021 EPSS Score
Jun 23, 2021 EPSS Score
Aug 25, 2021 EPSS Score
Oct 26, 2021 EPSS Score
Dec 28, 2021 EPSS Score
Mar 1, 2022 EPSS Score
May 3, 2022 EPSS Score
Jul 4, 2022 EPSS Score
Sep 6, 2022 EPSS Score
Nov 8, 2022 EPSS Score
Jan 10, 2023 EPSS Score

References

1041804 vdb
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14656 url
https://nvd.nist.gov/vuln/detail/CVE-2018-14656 advisory
https://lore.kernel.org/lkml/20180828154901.112726-1-jannh%40google.com/T url
https://lore.kernel.org/lkml/20180828154901.112726-1-jannh@google.com/T url
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=342db04ae71273322f0011384a9ed414df8bdae4 patch
https://bugs.chromium.org/p/project-zero/issues/detail?id=1650 issue
https://lore.kernel.org/lkml/20180828154901.112726-1-jannh%40google.com/T/ technical
https://seclists.org/oss-sec/2018/q4/9 mailing_list

Open in Interactive Console →