- Home
- CVEs with nessus.description==According to the versions of the kernel packages installed, the
EulerOS Virtualization installation on the remote host is affected by
the following vulnerabilities :
- A statement in the System Programming Guide of the
Intel 64 and IA-32 Architectures Software Developer's
Manual (SDM) was mishandled in the development of some
or all operating-system kernels, resulting in
unexpected behavior for #DB exceptions that are
deferred by MOV SS or POP SS, as demonstrated by (for
example) privilege escalation in Windows, macOS, some
Xen configurations, or FreeBSD, or a Linux kernel
crash. The MOV to SS and POP SS instructions inhibit
interrupts (including NMIs), data breakpoints, and
single step trap exceptions until the instruction
boundary following the next instruction (SDM Vol. 3A;
section 6.8.3). (The inhibited data breakpoints are
those on memory accessed by the MOV to SS or POP to SS
instruction itself.) Note that debug exceptions are not
inhibited by the interrupt enable (EFLAGS.IF) system
flag (SDM Vol. 3A; section 2.3). If the instruction
following the MOV to SS or POP to SS instruction is an
instruction like SYSCALL, SYSENTER, INT 3, etc. that
transfers control to the operating system at CPL < 3,
the debug exception is delivered after the transfer to
CPL < 3 is complete. OS kernels may not expect this
order of events and may therefore experience unexpected
behavior when it occurs.(CVE-2018-8897)
- A null pointer dereference in dccp_write_xmit()
function in net/dccp/output.c in the Linux kernel
allows a local user to cause a denial of service by a
number of certain crafted system calls.(CVE-2018-1130)
- The cdrom_ioctl_media_changed function in
drivers/cdrom/cdrom.c in the Linux kernel before 4.16.6
allows local attackers to use a incorrect bounds check
in the CDROM driver CDROM_MEDIA_CHANGED ioctl to read
out kernel memory.(CVE-2018-10940)
- An address corruption flaw was discovered in the Linux
kernel built with hardware breakpoint
(CONFIG_HAVE_HW_BREAKPOINT) support. While modifying a
h/w breakpoint via 'modify_user_hw_breakpoint' routine,
an unprivileged user/process could use this flaw to
crash the system kernel resulting in DoS OR to
potentially escalate privileges on a the
system.(CVE-2018-1000199)
Note that Tenable Network Security has extracted the preceding
description block directly from the EulerOS security advisory. Tenable
has attempted to automatically clean and format it as much as possible
without introducing additional issues.
Max CVSS | 0 |
Min CVSS | 0 |
Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published |
Back to Top
Mark selected
Back to Top