Mondoo Vulnerability Intelligence

Curated by Mondoo Research, enhanced with AI

Resources

Search Vulnerabilities
Trending CVEs
Browse Ecosystems
Terminology
Blog

Open Source

cnquery
cnspec

Star us on GitHub!

Company

Mondoo Platform
About
Contact

Vulnerability Intelligence

Customers

CVE-2018-20961 | Mondoo Vulnerability Intelligence

Vulnerability IntelligenceCVE-2018-20961

CVE-2018-20961

CRITICAL9.8

In the Linux kernel before 4

Published Aug 7, 2019

Modified 1 years ago

Details

In the Linux kernel before 4.16.4, a double free vulnerability in the f_midi_set_alt function of drivers/usb/gadget/function/f_midi.c in the f_midi driver may allow attackers to cause a denial of service or possibly have unspecified other impact.

References

WEB

http://packetstormsecurity.com/files/154228/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html

WEB

http://packetstormsecurity.com/files/154951/Kernel-Live-Patch-Security-Notice-LSN-0058-1.html

WEB

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.16.4

WEB

https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=7fafcfdf6377b18b2a726ea554d6e593ba44349f

WEB

https://github.com/torvalds/linux/commit/7fafcfdf6377b18b2a726ea554d6e593ba44349f

WEB

https://seclists.org/bugtraq/2019/Aug/48

WEB

https://security.netapp.com/advisory/ntap-20190905-0002/

WEB

https://support.f5.com/csp/article/K58502654

WEB

https://support.f5.com/csp/article/K58502654?utm_source=f5support&amp%3Butm_medium=RSS

ADVISORY

https://usn.ubuntu.com/4145-1/

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2018-20961

CVSS Analysis

CVSS v3.1

9.8

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Privileges Required

NonePR:N

User Interaction

NoneUI:N

Scope

UnchangedS:U

Impact

Confidentiality

HighC:H

Integrity

HighI:H

Availability

HighA:H

9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Ecosystems

Timeline

PublishedAug 7, 2019

ModifiedAug 5, 2024