CVE-2018-7566 The Linux kernel 4.15 has a Buffer Overflow via an SNDRV_SEQ_IOCTL_SET_CLIENT_POOL ioctl write operation to /dev/snd/seq by a local user.
HighCVSS 7.8
EPSS 0.47%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Linux kernel 4.15 has a Buffer Overflow via an SNDRV_SEQ_IOCTL_SET_CLIENT_POOL ioctl write operation to /dev/snd/seq by a local user.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/linux(Debian:12) | < 4.15.11-1 | 4.15.11-1 |
| debian/linux(Debian:13) | < 4.15.11-1 | 4.15.11-1 |
| debian/linux(Debian:14) | < 4.15.11-1 | 4.15.11-1 |
| Linux kernel | = 4.15 | No fix listed |
| SUSE linux enterprise module for public cloud | = 12 | No fix listed |
| SUSE linux enterprise server | = 12 | No fix listed |
| Canonical Ubuntu Linux | = 12.04 | No fix listed |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| Canonical Ubuntu Linux | = 16.04 | No fix listed |
| debian linux | = 7.0 | No fix listed |
| debian linux | = 8.0 | No fix listed |
| debian linux | = 9.0 | No fix listed |
| redhat enterprise linux desktop | = 6.0 | No fix listed |
| redhat enterprise linux desktop | = 7.0 | No fix listed |
| redhat enterprise linux server | = 6.0 | No fix listed |
| redhat enterprise linux server | = 7.0 | No fix listed |
| redhat enterprise linux server aus | = 7.6 | No fix listed |
| redhat enterprise linux server eus | = 7.5 | No fix listed |
| redhat enterprise linux server eus | = 7.6 | No fix listed |
| redhat enterprise linux server tus | = 7.6 | No fix listed |
| redhat enterprise linux workstation | = 6.0 | No fix listed |
| redhat enterprise linux workstation | = 7.0 | No fix listed |
| oracle communications eagle application processor | = 16.1.0 | No fix listed |
| oracle communications eagle application processor | = 16.2.0 | No fix listed |
References
- Ubuntu CVE tracker vendor-advisory
- USN-3631-1 vendor-advisory
- USN-3631-2 vendor-advisory
- USN-3798-1 vendor-advisory
- USN-3798-2 vendor-advisory
- www.cve.org
- Debian Security Tracker CVE-2018-7566 vendor-advisory
- SUSE-SU-2018:0834 third-party-advisory vendor-advisory
- [alsa-devel] 20180214 [PATCH] ALSA: seq: Fix racy pool initializations mailing-list patch third-party-advisory
- 103605 third-party-advisory vdb-entry
- RHSA-2018:2384 third-party-advisory vendor-advisory
- RHSA-2018:2390 third-party-advisory vendor-advisory
- RHSA-2018:2395 third-party-advisory vendor-advisory
- RHSA-2018:2948 third-party-advisory vendor-advisory
- RHSA-2019:1483 vendor-advisory
- RHSA-2019:1487 vendor-advisory
- bugzilla.redhat.com issue-tracking patch third-party-advisory
- git.kernel.org patch vendor-advisory
- help.ecostruxureit.com third-party-advisory
- [debian-lts-announce] 20180502 [SECURITY] [DLA 1369-1] linux security update mailing-list third-party-advisory
- USN-3631-1 third-party-advisory vendor-advisory
- USN-3631-2 third-party-advisory vendor-advisory
- USN-3798-1 third-party-advisory vendor-advisory
- USN-3798-2 third-party-advisory vendor-advisory
- DSA-4187 third-party-advisory vendor-advisory
- DSA-4188 third-party-advisory vendor-advisory
- www.oracle.com
- www.oracle.com patch third-party-advisory