CVE-2018-10877CWE-125

Linux kernel ext4 filesystem is vulnerable to an out-of-bound access in the ext4_ext_drop_refs() function when operating on a crafted ext4 filesystem image

High · published July 18, 2018

CVSS v3.0
7.3
EPSS
2%
Percentile
82.6
In the wild
Unconfirmed
What it is

Linux kernel ext4 filesystem is vulnerable to an out-of-bound access in the ext4_ext_drop_refs() function when operating on a crafted ext4 filesystem image.

The record
Technical detail
CVSS v3.0
7.3 · HIGH
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.02223 · 82.6th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2018-07-18T15:00Z
EPSS history
Timeline
  • 18 JUL 15:00Z
    Linux kernel ext4 filesystem is vulnerable to an out-of-bound access in the ext4_ext_drop_refs() function when operating on a crafted ext4 filesystem image
    cvelistv5