CVE-2018-11506

The sr_do_ioctl function in drivers/scsi/sr_ioctl.c in the Linux kernel through 4.16.12 allows local users to cause a denial of service (stack-based buffer…

published May 28, 2018

CVSS
—
EPSS
0%
Percentile
31.9
In the wild
Unconfirmed
What it is

The sr_do_ioctl function in drivers/scsi/sr_ioctl.c in the Linux kernel through 4.16.12 allows local users to cause a denial of service (stack-based buffer overflow) or possibly have unspecified other impact because sense buffers have different sizes at the CDROM layer and the SCSI layer, as demonstrated by a CDROMREADMODE2 ioctl call.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00390 · 31.9th percentile
Published
2018-05-28T04:00Z
EPSS history
Timeline
  • 28 MAY 04:00Z
    The sr_do_ioctl function in drivers/scsi/sr_ioctl.c in the Linux kernel through 4.16.12 allows local users to cause a denial of service (stack-based buffer…
    cvelistv5