CVE-2018-7566
moderate-risk
Published 2018-03-30
The Linux kernel 4.15 has a Buffer Overflow via an SNDRV_SEQ_IOCTL_SET_CLIENT_POOL ioctl write operation to /dev/snd/seq by a local user.
Do I need to act?
-
0.05% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
7
CVSS 7.8/10
High
LOCAL
/ LOW complexity
Affected Products (20)
Communications Eagle Application Processor
References (42)
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2018-03/msg00067.html
Third Party Advisory
http://www.securityfocus.com/bid/103605
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2384
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2390
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2395
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2948
Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=1550142
Third Party Advisory
https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+Struxur...
Third Party Advisory
https://usn.ubuntu.com/3631-1/
Third Party Advisory
https://usn.ubuntu.com/3631-2/
Third Party Advisory
https://usn.ubuntu.com/3798-1/
Third Party Advisory
https://usn.ubuntu.com/3798-2/
Third Party Advisory
https://www.debian.org/security/2018/dsa-4187
Third Party Advisory
https://www.debian.org/security/2018/dsa-4188
and 22 more references
44
/ 100
moderate-risk
Severity
24/34 · High
Exploitability
0/34 · Minimal
Exposure
20/34 · Moderate