Search
Find a vulnerability
Search criteria
ⓘ
Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.
Related vulnerabilities
BDU:2020-00048 (CVE-2018-8897)
Vulnerability from fstec – Published: 2020-01-13 – Updated: 2021-08-19 – View on bdu.fstec.ru Fixed
VLAI
Title
Уязвимость ядра операционных систем Linux, Windows, Ubuntu, Debian GNU/Linux, Red Hat Enterprise Linux, macOS, EulerOS, позволяющая нарушителю повысить свои привилегии
Summary
Уязвимость ядра операционных систем Linux, Windows, Ubuntu, Debian GNU/Linux, Red Hat Enterprise Linux, macOS, EulerOS связана с ошибками при интерпретации описания поведения инструкций MOV SS/POP SS. Эксплуатация уязвимости может позволить нарушителю повысить свои привилегии
Severity
Class
Code vulnerability
Status
Confirmed by the vendor
Exploitation
Timing and state manipulation
Incidents
Being clarified
Remediation
Software update
CWE
Aliases
References
31 references
Impacted products
35 products
from 9 vendors
Vendors
Microsoft Corp, Canonical Ltd., Red Hat, Inc., Сообщество свободного программного обеспечения, Apple Inc., Huawei Technologies Co., Ltd., АО «НТЦ ИТ РОСА»
Products
Windows 7 Service Pack 1, Windows Server 2008 Service Pack 2, Windows 8.1, Windows Server 2012, Windows Server 2012 R2, Ubuntu, Windows Server 2008 R2 Service Pack 1, Windows RT 8.1, Windows 10, Windows 10 1607, Red Hat Enterprise Linux, Windows 10 1703, Windows Server 2016, Windows Server 2008 Service Pack 2 (Server Core Installation), Windows Server 2012 R2 (Server Core installation), Windows Server 2016 (Server Core installation), Debian GNU/Linux, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows 10 1709, Windows Server 1709 (Server Core Installation), Windows 10 1803, Windows Server 1803 (Server Core Installation), Red Hat Virtualization, Red Hat Enterprise MRG, MacOS, EulerOS, FusionModule1000A, FusionSphere OpenStack, ManageOne, OceanStor Backup Software, SMC2.0, iManager NetEco, iManager NetEco 6000, РОСА Кобальт (запись в едином реестре российских программ №1999), Windows Server 2012 (Server Core installation)
Versions
- (Windows 7 Service Pack 1), - (Windows Server 2008 Service Pack 2), - (Windows 8.1), - (Windows Server 2012), - (Windows Server 2012 R2), 14.04 LTS (Ubuntu), - (Windows Server 2008 R2 Service Pack 1), - (Windows RT 8.1), - (Windows 10), - (Windows 10 1607), 6 (Red Hat Enterprise Linux), 7 (Red Hat Enterprise Linux), 16.04 LTS (Ubuntu), - (Windows 10 1703), - (Windows Server 2016), - (Windows Server 2008 Service Pack 2 (Server Core Installation)), - (Windows Server 2012 R2 (Server Core installation)), - (Windows Server 2016 (Server Core installation)), 9 (Debian GNU/Linux), - (Windows Server 2008 R2 Service Pack 1 (Server Core installation)), - (Windows 10 1709), 17.10 (Ubuntu), - (Windows Server 1709 (Server Core Installation)), - (Windows 10 1803), - (Windows Server 1803 (Server Core Installation)), 4 (Red Hat Virtualization), 12.04 ESM (Ubuntu), 2.0 (Red Hat Enterprise MRG), 8 (Debian GNU/Linux), 7.4 Extended Update Support (Red Hat Enterprise Linux), 7 (Debian GNU/Linux), 7.2 Advanced Update Support (Red Hat Enterprise Linux), 7.2 Telco Extended Update Support (Red Hat Enterprise Linux), 5 Extended Lifecycle Support (Red Hat Enterprise Linux), 5.9 Long Life (Red Hat Enterprise Linux), 7.3 Extended Update Support (Red Hat Enterprise Linux), 6.5 Advanced Update Support (Red Hat Enterprise Linux), 6.6 Advanced Update Support (Red Hat Enterprise Linux), 6.6 Telco Extended Update Support (Red Hat Enterprise Linux), 6.4 Advanced Update Support (Red Hat Enterprise Linux), 7.2 Update Services for SAP Solutions (Red Hat Enterprise Linux), 6.7 Extended Update Support (Red Hat Enterprise Linux), до 10.13.4 (MacOS), V200R002C10 (EulerOS), V200R002C20 (EulerOS), V200R003C00 (EulerOS), V200R005C00 (EulerOS), V100R003C10 (FusionModule1000A), V100R005C00 (FusionSphere OpenStack), V100R005C10 (FusionSphere OpenStack), V100R006C00 (FusionSphere OpenStack), V100R006C10 (FusionSphere OpenStack), V100R006C30 (FusionSphere OpenStack), V100R003C00 (ManageOne), V100R006C30 (ManageOne), V100R001C00 (OceanStor Backup Software), V100R002C00 (OceanStor Backup Software), V200R001C00 (OceanStor Backup Software), V100R003C10 (SMC2.0), V500R002C00 (SMC2.0), V600R007C00 (iManager NetEco), V600R007C10 (iManager NetEco), V600R007C11 (iManager NetEco), V600R007C12 (iManager NetEco), V600R007C20 (iManager NetEco), V600R007C40 (iManager NetEco), V600R007C40 (iManager NetEco 6000), V600R007C60 (iManager NetEco 6000), V600R007C80 (iManager NetEco 6000), V600R007C90 (iManager NetEco 6000), - (РОСА Кобальт), - (Windows Server 2012 (Server Core installation))
Product types
Operating system, Virtualization software, Application software, ПО программно-аппаратного средства АСУ ТП, Network appliance software
Platforms
Microsoft Corp Windows 7 Service Pack 1 - 64-bit, Microsoft Corp Windows Server 2008 Service Pack 2 - 32-bit, Microsoft Corp Windows 7 Service Pack 1 - 32-bit, Microsoft Corp Windows 8.1 - 64-bit, Microsoft Corp Windows 8.1 - 32-bit, Microsoft Corp Windows Server 2008 Service Pack 2 - 64-bit, Microsoft Corp Windows Server 2012 -, Microsoft Corp Windows Server 2012 R2 -, Canonical Ltd. Ubuntu 14.04 LTS, Microsoft Corp Windows Server 2008 R2 Service Pack 1 - 64-bit, Microsoft Corp Windows RT 8.1 - ARM, Microsoft Corp Windows 10 - 64-bit, Microsoft Corp Windows 10 - 32-bit, Microsoft Corp Windows 10 1607 - 64-bit, Microsoft Corp Windows 10 1607 - 32-bit, Red Hat, Inc. Red Hat Enterprise Linux 6, Inc. Red Hat Enterprise Linux 7, Canonical Ltd. Ubuntu 16.04 LTS, Microsoft Corp Windows 10 1703 - 32-bit, Microsoft Corp Windows Server 2016 -, Microsoft Corp Windows 10 1703 - 64-bit, Microsoft Corp Windows Server 2008 Service Pack 2 (Server Core Installation) - 64-bit, Microsoft Corp Windows Server 2008 Service Pack 2 (Server Core Installation) - 32-bit, Microsoft Corp Windows Server 2012 R2 (Server Core installation) -, Microsoft Corp Windows Server 2016 (Server Core installation) -, Microsoft Corp Windows Server 2008 R2 Service Pack 1 - Itanium, Сообщество свободного программного обеспечения Debian GNU/Linux 9, Microsoft Corp Windows Server 2008 R2 Service Pack 1 (Server Core installation) - 64-bit, Microsoft Corp Windows Server 2008 Service Pack 2 - Itanium, Microsoft Corp Windows 10 1709 - 64-bit, Microsoft Corp Windows 10 1709 - 32-bit, Canonical Ltd. Ubuntu 17.10, Microsoft Corp Windows Server 1709 (Server Core Installation) -, Microsoft Corp Windows 10 1803 - 64-bit, Microsoft Corp Windows 10 1803 - 32-bit, Microsoft Corp Windows Server 1803 (Server Core Installation) -, Canonical Ltd. Ubuntu 12.04 ESM, Сообщество свободного программного обеспечения Debian GNU/Linux 8, Inc. Red Hat Enterprise Linux 7.4 Extended Update Support, Сообщество свободного программного обеспечения Debian GNU/Linux 7, Inc. Red Hat Enterprise Linux 7.2 Advanced Update Support, Inc. Red Hat Enterprise Linux 7.2 Telco Extended Update Support, Inc. Red Hat Enterprise Linux 5 Extended Lifecycle Support, Inc. Red Hat Enterprise Linux 5.9 Long Life, Inc. Red Hat Enterprise Linux 7.3 Extended Update Support, Inc. Red Hat Enterprise Linux 6.5 Advanced Update Support, Inc. Red Hat Enterprise Linux 6.6 Advanced Update Support, Inc. Red Hat Enterprise Linux 6.6 Telco Extended Update Support, Inc. Red Hat Enterprise Linux 6.4 Advanced Update Support, Inc. Red Hat Enterprise Linux 7.2 Update Services for SAP Solutions, Inc. Red Hat Enterprise Linux 6.7 Extended Update Support, Apple Inc. MacOS до 10.13.4, Huawei Technologies Co., Ltd. EulerOS V200R002C10, Ltd. EulerOS V200R002C20, Ltd. EulerOS V200R003C00, Ltd. EulerOS V200R005C00, АО «НТЦ ИТ РОСА» РОСА Кобальт - (запись в едином реестре российских программ №1999), Microsoft Corp Windows Server 2012 (Server Core installation) -
Mitigations
Использование рекомендаций:
Для программных продуктов Microsoft Corp.:
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8897
Для Ubuntu:
https://usn.ubuntu.com/3641-1/
https://usn.ubuntu.com/3641-2/
Для Debian GNU/Linux:
https://www.debian.org/security/2018/dsa-4196
https://www.debian.org/security/2018/dsa-4201
https://lists.debian.org/debian-lts-announce/2018/05/msg00015.html
https://lists.debian.org/debian-lts-announce/2018/06/msg00000.html
https://lists.debian.org/debian-lts-announce/2018/11/msg00013.html
Для программных продуктов Red Hat Inc.:
https://bugzilla.redhat.com/show_bug.cgi?id=1567074
https://bugzilla.redhat.com/show_bug.cgi?id=1596094
Для программных продуктов Huawei Technologies Co., Ltd.:
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190921-01-debug-en
Для Mac OS:
https://support.apple.com/ru-ru/HT208742
Для ОС РОСА КОБАЛЬТ:
http://wiki.rosalab.ru/ru/index.php/ROSA-SA-18-05-22.018
Credits
Уязвимость существует при использовании 64-разрядных процессоров x86 (AMD и Intel)
{
"CVSS 2.0": "AV:L/AC:L/Au:S/C:C/I:C/A:C",
"CVSS 3.0": "AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"CVSS 4.0": null,
"remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
"remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
"\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Microsoft Corp, Canonical Ltd., Red Hat, Inc., \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f, Apple Inc., Huawei Technologies Co., Ltd., \u0410\u041e \u00ab\u041d\u0422\u0426 \u0418\u0422 \u0420\u041e\u0421\u0410\u00bb",
"\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "- (Windows 7 Service Pack 1), - (Windows Server 2008 Service Pack 2), - (Windows 8.1), - (Windows Server 2012), - (Windows Server 2012 R2), 14.04 LTS (Ubuntu), - (Windows Server 2008 R2 Service Pack 1), - (Windows RT 8.1), - (Windows 10), - (Windows 10 1607), 6 (Red Hat Enterprise Linux), 7 (Red Hat Enterprise Linux), 16.04 LTS (Ubuntu), - (Windows 10 1703), - (Windows Server 2016), - (Windows Server 2008 Service Pack 2 (Server Core Installation)), - (Windows Server 2012 R2 (Server Core installation)), - (Windows Server 2016 (Server Core installation)), 9 (Debian GNU/Linux), - (Windows Server 2008 R2 Service Pack 1 (Server Core installation)), - (Windows 10 1709), 17.10 (Ubuntu), - (Windows Server 1709 (Server Core Installation)), - (Windows 10 1803), - (Windows Server 1803 (Server Core Installation)), 4 (Red Hat Virtualization), 12.04 ESM (Ubuntu), 2.0 (Red Hat Enterprise MRG), 8 (Debian GNU/Linux), 7.4 Extended Update Support (Red Hat Enterprise Linux), 7 (Debian GNU/Linux), 7.2 Advanced Update Support (Red Hat Enterprise Linux), 7.2 Telco Extended Update Support (Red Hat Enterprise Linux), 5 Extended Lifecycle Support (Red Hat Enterprise Linux), 5.9 Long Life (Red Hat Enterprise Linux), 7.3 Extended Update Support (Red Hat Enterprise Linux), 6.5 Advanced Update Support (Red Hat Enterprise Linux), 6.6 Advanced Update Support (Red Hat Enterprise Linux), 6.6 Telco Extended Update Support (Red Hat Enterprise Linux), 6.4 Advanced Update Support (Red Hat Enterprise Linux), 7.2 Update Services for SAP Solutions (Red Hat Enterprise Linux), 6.7 Extended Update Support (Red Hat Enterprise Linux), \u0434\u043e 10.13.4 (MacOS), V200R002C10 (EulerOS), V200R002C20 (EulerOS), V200R003C00 (EulerOS), V200R005C00 (EulerOS), V100R003C10 (FusionModule1000A), V100R005C00 (FusionSphere OpenStack), V100R005C10 (FusionSphere OpenStack), V100R006C00 (FusionSphere OpenStack), V100R006C10 (FusionSphere OpenStack), V100R006C30 (FusionSphere OpenStack), V100R003C00 (ManageOne), V100R006C30 (ManageOne), V100R001C00 (OceanStor Backup Software), V100R002C00 (OceanStor Backup Software), V200R001C00 (OceanStor Backup Software), V100R003C10 (SMC2.0), V500R002C00 (SMC2.0), V600R007C00 (iManager NetEco), V600R007C10 (iManager NetEco), V600R007C11 (iManager NetEco), V600R007C12 (iManager NetEco), V600R007C20 (iManager NetEco), V600R007C40 (iManager NetEco), V600R007C40 (iManager NetEco 6000), V600R007C60 (iManager NetEco 6000), V600R007C80 (iManager NetEco 6000), V600R007C90 (iManager NetEco 6000), - (\u0420\u041e\u0421\u0410 \u041a\u043e\u0431\u0430\u043b\u044c\u0442), - (Windows Server 2012 (Server Core installation))",
"\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\n\u0414\u043b\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Microsoft Corp.:\nhttps://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8897\n\n\u0414\u043b\u044f Ubuntu:\nhttps://usn.ubuntu.com/3641-1/\nhttps://usn.ubuntu.com/3641-2/\n\n\u0414\u043b\u044f Debian GNU/Linux:\nhttps://www.debian.org/security/2018/dsa-4196\nhttps://www.debian.org/security/2018/dsa-4201\nhttps://lists.debian.org/debian-lts-announce/2018/05/msg00015.html\nhttps://lists.debian.org/debian-lts-announce/2018/06/msg00000.html\nhttps://lists.debian.org/debian-lts-announce/2018/11/msg00013.html\n\n\u0414\u043b\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Red Hat Inc.:\nhttps://bugzilla.redhat.com/show_bug.cgi?id=1567074\nhttps://bugzilla.redhat.com/show_bug.cgi?id=1596094\n\n\u0414\u043b\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Huawei Technologies Co., Ltd.:\nhttps://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190921-01-debug-en\n\n\u0414\u043b\u044f Mac OS:\nhttps://support.apple.com/ru-ru/HT208742\n\n\u0414\u043b\u044f \u041e\u0421 \u0420\u041e\u0421\u0410 \u041a\u041e\u0411\u0410\u041b\u042c\u0422:\nhttp://wiki.rosalab.ru/ru/index.php/ROSA-SA-18-05-22.018",
"\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "08.05.2018",
"\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "19.08.2021",
"\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "13.01.2020",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2020-00048",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2018-8897, EDB-ID44697",
"\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
"\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
"\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Windows 7 Service Pack 1, Windows Server 2008 Service Pack 2, Windows 8.1, Windows Server 2012, Windows Server 2012 R2, Ubuntu, Windows Server 2008 R2 Service Pack 1, Windows RT 8.1, Windows 10, Windows 10 1607, Red Hat Enterprise Linux, Windows 10 1703, Windows Server 2016, Windows Server 2008 Service Pack 2 (Server Core Installation), Windows Server 2012 R2 (Server Core installation), Windows Server 2016 (Server Core installation), Debian GNU/Linux, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows 10 1709, Windows Server 1709 (Server Core Installation), Windows 10 1803, Windows Server 1803 (Server Core Installation), Red Hat Virtualization, Red Hat Enterprise MRG, MacOS, EulerOS, FusionModule1000A, FusionSphere OpenStack, ManageOne, OceanStor Backup Software, SMC2.0, iManager NetEco, iManager NetEco 6000, \u0420\u041e\u0421\u0410 \u041a\u043e\u0431\u0430\u043b\u044c\u0442 (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21161999), Windows Server 2012 (Server Core installation)",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "Microsoft Corp Windows 7 Service Pack 1 - 64-bit, Microsoft Corp Windows Server 2008 Service Pack 2 - 32-bit, Microsoft Corp Windows 7 Service Pack 1 - 32-bit, Microsoft Corp Windows 8.1 - 64-bit, Microsoft Corp Windows 8.1 - 32-bit, Microsoft Corp Windows Server 2008 Service Pack 2 - 64-bit, Microsoft Corp Windows Server 2012 - , Microsoft Corp Windows Server 2012 R2 - , Canonical Ltd. Ubuntu 14.04 LTS , Microsoft Corp Windows Server 2008 R2 Service Pack 1 - 64-bit, Microsoft Corp Windows RT 8.1 - ARM, Microsoft Corp Windows 10 - 64-bit, Microsoft Corp Windows 10 - 32-bit, Microsoft Corp Windows 10 1607 - 64-bit, Microsoft Corp Windows 10 1607 - 32-bit, Red Hat, Inc. Red Hat Enterprise Linux 6 , Red Hat, Inc. Red Hat Enterprise Linux 7 , Canonical Ltd. Ubuntu 16.04 LTS , Microsoft Corp Windows 10 1703 - 32-bit, Microsoft Corp Windows Server 2016 - , Microsoft Corp Windows 10 1703 - 64-bit, Microsoft Corp Windows Server 2008 Service Pack 2 (Server Core Installation) - 64-bit, Microsoft Corp Windows Server 2008 Service Pack 2 (Server Core Installation) - 32-bit, Microsoft Corp Windows Server 2012 R2 (Server Core installation) - , Microsoft Corp Windows Server 2016 (Server Core installation) - , Microsoft Corp Windows Server 2008 R2 Service Pack 1 - Itanium, \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Debian GNU/Linux 9 , Microsoft Corp Windows Server 2008 R2 Service Pack 1 (Server Core installation) - 64-bit, Microsoft Corp Windows Server 2008 Service Pack 2 - Itanium, Microsoft Corp Windows 10 1709 - 64-bit, Microsoft Corp Windows 10 1709 - 32-bit, Canonical Ltd. Ubuntu 17.10 , Microsoft Corp Windows Server 1709 (Server Core Installation) - , Microsoft Corp Windows 10 1803 - 64-bit, Microsoft Corp Windows 10 1803 - 32-bit, Microsoft Corp Windows Server 1803 (Server Core Installation) - , Canonical Ltd. Ubuntu 12.04 ESM , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Debian GNU/Linux 8 , Red Hat, Inc. Red Hat Enterprise Linux 7.4 Extended Update Support , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Debian GNU/Linux 7 , Red Hat, Inc. Red Hat Enterprise Linux 7.2 Advanced Update Support , Red Hat, Inc. Red Hat Enterprise Linux 7.2 Telco Extended Update Support , Red Hat, Inc. Red Hat Enterprise Linux 5 Extended Lifecycle Support , Red Hat, Inc. Red Hat Enterprise Linux 5.9 Long Life , Red Hat, Inc. Red Hat Enterprise Linux 7.3 Extended Update Support , Red Hat, Inc. Red Hat Enterprise Linux 6.5 Advanced Update Support , Red Hat, Inc. Red Hat Enterprise Linux 6.6 Advanced Update Support , Red Hat, Inc. Red Hat Enterprise Linux 6.6 Telco Extended Update Support , Red Hat, Inc. Red Hat Enterprise Linux 6.4 Advanced Update Support , Red Hat, Inc. Red Hat Enterprise Linux 7.2 Update Services for SAP Solutions , Red Hat, Inc. Red Hat Enterprise Linux 6.7 Extended Update Support , Apple Inc. MacOS \u0434\u043e 10.13.4 , Huawei Technologies Co., Ltd. EulerOS V200R002C10 , Huawei Technologies Co., Ltd. EulerOS V200R002C20 , Huawei Technologies Co., Ltd. EulerOS V200R003C00 , Huawei Technologies Co., Ltd. EulerOS V200R005C00 , \u0410\u041e \u00ab\u041d\u0422\u0426 \u0418\u0422 \u0420\u041e\u0421\u0410\u00bb \u0420\u041e\u0421\u0410 \u041a\u043e\u0431\u0430\u043b\u044c\u0442 - (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21161999), Microsoft Corp Windows Server 2012 (Server Core installation) - ",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u044f\u0434\u0440\u0430 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c Linux, Windows, Ubuntu, Debian GNU/Linux, Red Hat Enterprise Linux, macOS, EulerOS, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438",
"\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043e\u0431\u0449\u0435\u0433\u043e \u0440\u0435\u0441\u0443\u0440\u0441\u0430 \u0441 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0435\u0439 (\u00ab\u0421\u0438\u0442\u0443\u0430\u0446\u0438\u044f \u0433\u043e\u043d\u043a\u0438\u00bb) (CWE-362), \u041d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0438\u043b\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0430 \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0439 (CWE-703)",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u044f\u0434\u0440\u0430 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c Linux, Windows, Ubuntu, Debian GNU/Linux, Red Hat Enterprise Linux, macOS, EulerOS \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438 \u043f\u0440\u0438 \u0438\u043d\u0442\u0435\u0440\u043f\u0440\u0435\u0442\u0430\u0446\u0438\u0438 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u044f \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0439 MOV SS/POP SS. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438",
"\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
"\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 64-\u0440\u0430\u0437\u0440\u044f\u0434\u043d\u044b\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 x86 (AMD \u0438 Intel)",
"\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0440\u043e\u043a\u0430\u043c\u0438 \u0438 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435\u043c",
"\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190921-01-debug-en\nhttps://www.kb.cert.org/vuls/id/631579/\nhttps://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8897\nhttps://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=d8ba61ba58c88d5207c1ba2f7d9a2280e7d03be9\nhttps://usn.ubuntu.com/3641-1/\nhttps://usn.ubuntu.com/3641-2/\nhttps://www.debian.org/security/2018/dsa-4196\nhttps://www.debian.org/security/2018/dsa-4201\nhttps://lists.debian.org/debian-lts-announce/2018/05/msg00015.html\nhttps://lists.debian.org/debian-lts-announce/2018/06/msg00000.html\nhttps://lists.debian.org/debian-lts-announce/2018/11/msg00013.html\nhttps://access.redhat.com/security/cve/cve-2018-8897\nhttps://bugzilla.redhat.com/show_bug.cgi?id=1567074\nhttps://bugzilla.redhat.com/show_bug.cgi?id=1596094\nhttps://access.redhat.com/errata/RHSA-2018:1318\nhttps://access.redhat.com/errata/RHSA-2018:1319\nhttps://access.redhat.com/errata/RHSA-2018:1345\nhttps://access.redhat.com/errata/RHSA-2018:1346\nhttps://access.redhat.com/errata/RHSA-2018:1347\nhttps://access.redhat.com/errata/RHSA-2018:1348\nhttps://access.redhat.com/errata/RHSA-2018:1349\nhttps://access.redhat.com/errata/RHSA-2018:1350\nhttps://access.redhat.com/errata/RHSA-2018:1351\nhttps://access.redhat.com/errata/RHSA-2018:1352\nhttps://access.redhat.com/errata/RHSA-2018:1353\nhttps://access.redhat.com/errata/RHSA-2018:1354\nhttps://access.redhat.com/errata/RHSA-2018:1355\nhttps://access.redhat.com/errata/RHSA-2018:1524\nhttps://www.exploit-db.com/exploits/44697\nhttps://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190921-01-debug-en\nhttps://www.opennet.ru/opennews/art.shtml?num=48569\nhttp://wiki.rosalab.ru/ru/index.php/ROSA-SA-18-05-22.018",
"\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
"\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430, \u041f\u041e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438/\u041f\u041e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430, \u041f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0435 \u041f\u041e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u041f\u041e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0410\u0421\u0423 \u0422\u041f, \u041f\u041e \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430",
"\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-362, CWE-703",
"\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 6,8)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,8)"
}