CVE-2018-5852CWE-126

Buffer Over-read in IPA

High · published November 26, 2024

CVSS v3.1
8.4
EPSS
0%
Percentile
1.5
In the wild
Unconfirmed
What it is

An unsigned integer underflow vulnerability in IPA driver result into a buffer over-read while reading NAT entry using debugfs command 'cat /sys/kernel/debug/ipa/ip4_nat'

The record
Technical detail
CVSS v3.1
8.4 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00116 · 1.5th percentile
Weakness
CWE-126 · Buffer Over-read
Published
2024-11-26T13:56Z
EPSS history
Timeline
  • 26 NOV 13:56Z
    Buffer Over-read in IPA
    cvelistv5