CVE-2018-20168 Google gVisor before 2018-08-22 reuses a pagetable in a different level with the paging-structure cache intact, which allows attackers to cause a denial of service ("physical address not valid" panic)...
MediumCVSS 5.5
EPSS 0.28%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Google gVisor before 2018-08-22 reuses a pagetable in a different level with the paging-structure cache intact, which allows attackers to cause a denial of service ("physical address not valid" panic) via a crafted application.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Google gVisor | < 2018-08-22 | 2018-08-22 |
References
- bugs.chromium.org patch vendor-advisory
- Debian Security Tracker CVE-2018-20168 vendor-advisory