CVE-2018-14678
CVE-2018-14678
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
An issue was discovered in the Linux kernel through 4.17.11, as used in Xen through 4.11.x. The xen_failsafe_callback entry point in arch/x86/entry/entry_64.S does not properly maintain RBX, which allows local users to cause a denial of service (uninitialized memory usage and system crash). Within Xen, 64-bit x86 PV Linux guest OS users can trigger a guest OS crash or possibly gain privileges.
CVSS 7.8 · Alta · EPSS 0,4% · Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
n/a
- Versiones
- n/a: Afectada
Sin corrección publicada
linux Debian:12
- Intervalos de versiones afectados
- ECOSYSTEM: < 4.17.14-1
Actualiza a 4.17.14-1
linux Debian:13
- Intervalos de versiones afectados
- ECOSYSTEM: < 4.17.14-1
Actualiza a 4.17.14-1
linux Debian:14
- Intervalos de versiones afectados
- ECOSYSTEM: < 4.17.14-1
Actualiza a 4.17.14-1
linux-azure Ubuntu:14.04:LTS
- Versiones
- 4.15.0-1023.24~14.04.1
- 4.15.0-1030.31~14.04.1
- 4.15.0-1031.32~14.04.1
- 4.15.0-1032.33~14.04.2
- 4.15.0-1035.36~14.04.2
- 4.15.0-1036.38~14.04.2
- 4.15.0-1037.39~14.04.2
- 4.15.0-1039.41~14.04.2
- 4.15.0-1040.44~14.04.1
- Intervalos de versiones afectados
- ECOSYSTEM: < 4.15.0-1041.45~14.04.1
Actualiza a 4.15.0-1041.45~14.04.1
linux-aws-hwe Ubuntu:16.04:LTS
- Versiones
- 4.15.0-1030.31~16.04.1
- 4.15.0-1031.33~16.04.1
- 4.15.0-1032.34~16.04.1
- 4.15.0-1033.35~16.04.1
- Intervalos de versiones afectados
- ECOSYSTEM: < 4.15.0-1035.37~16.04.1
Actualiza a 4.15.0-1035.37~16.04.1
linux-azure Ubuntu:16.04:LTS
- Versiones
- 4.11.0-1009.9
- 4.11.0-1011.11
- 4.11.0-1013.13
- 4.11.0-1014.14
- 4.11.0-1015.15
- 4.11.0-1016.16
- 4.13.0-1005.7
- 4.13.0-1006.8
- 4.13.0-1007.9
- 4.13.0-1009.12
- 4.13.0-1011.14
- 4.13.0-1012.15
- 4.13.0-1014.17
- 4.13.0-1016.19
- 4.13.0-1018.21
- 4.15.0-1013.13~16.04.2
- 4.15.0-1014.14~16.04.1
- 4.15.0-1018.18~16.04.1
- 4.15.0-1019.19~16.04.1
- 4.15.0-1021.21~16.04.1
- 4.15.0-1022.22~16.04.1
- 4.15.0-1023.24~16.04.1
- 4.15.0-1025.26~16.04.1
- 4.15.0-1028.29~16.04.1
- 4.15.0-1030.31~16.04.1
- 4.15.0-1031.32~16.04.1
- 4.15.0-1032.33~16.04.1
- 4.15.0-1035.36~16.04.1
- 4.15.0-1036.38~16.04.1
- 4.15.0-1037.39~16.04.1
- 4.15.0-1039.43
- 4.15.0-1040.44
- Intervalos de versiones afectados
- ECOSYSTEM: < 4.15.0-1041.45
Actualiza a 4.15.0-1041.45
linux-gcp Ubuntu:16.04:LTS
- Versiones
- 4.10.0-1004.4
- 4.10.0-1006.6
- 4.10.0-1007.7
- 4.10.0-1008.8
- 4.10.0-1009.9
- 4.13.0-1002.5
- 4.13.0-1006.9
- 4.13.0-1007.10
- 4.13.0-1008.11
- 4.13.0-1011.15
- 4.13.0-1012.16
- 4.13.0-1013.17
- 4.13.0-1015.19
- 4.13.0-1017.21
- 4.13.0-1019.23
- 4.15.0-1014.14~16.04.1
- 4.15.0-1015.15~16.04.1
- 4.15.0-1017.18~16.04.1
- 4.15.0-1018.19~16.04.2
- 4.15.0-1019.20~16.04.1
- 4.15.0-1021.22~16.04.1
- 4.15.0-1023.24~16.04.1
- 4.15.0-1024.25~16.04.2
- 4.15.0-1025.26~16.04.1
- 4.15.0-1026.27~16.04.1
- 4.15.0-1027.28~16.04.1
- 4.15.0-1028.29~16.04.1
- Intervalos de versiones afectados
- ECOSYSTEM: < 4.15.0-1029.31~16.04.1
Actualiza a 4.15.0-1029.31~16.04.1
linux-hwe Ubuntu:16.04:LTS
- Versiones
- 4.8.0-36.36~16.04.1
- 4.8.0-39.42~16.04.1
- 4.8.0-41.44~16.04.1
- 4.8.0-42.45~16.04.1
- 4.8.0-44.47~16.04.1
- 4.8.0-45.48~16.04.1
- 4.8.0-46.49~16.04.1
- 4.8.0-49.52~16.04.1
- 4.8.0-51.54~16.04.1
- 4.8.0-52.55~16.04.1
- 4.8.0-53.56~16.04.1
- 4.8.0-54.57~16.04.1
- 4.8.0-56.61~16.04.1
- 4.8.0-58.63~16.04.1
- 4.10.0-27.30~16.04.2
- 4.10.0-28.32~16.04.2
- 4.10.0-30.34~16.04.1
- 4.10.0-32.36~16.04.1
- 4.10.0-33.37~16.04.1
- 4.10.0-35.39~16.04.1
- 4.10.0-37.41~16.04.1
- 4.10.0-38.42~16.04.1
- 4.10.0-40.44~16.04.1
- 4.10.0-42.46~16.04.1
- 4.13.0-26.29~16.04.2
- 4.13.0-31.34~16.04.1
- 4.13.0-32.35~16.04.1
- 4.13.0-36.40~16.04.1
- 4.13.0-37.42~16.04.1
- 4.13.0-38.43~16.04.1
- 4.13.0-39.44~16.04.1
- 4.13.0-41.46~16.04.1
- 4.13.0-43.48~16.04.1
- 4.13.0-45.50~16.04.1
- 4.15.0-24.26~16.04.1
- 4.15.0-29.31~16.04.1
- 4.15.0-30.32~16.04.1
- 4.15.0-32.35~16.04.1
- 4.15.0-33.36~16.04.1
- 4.15.0-34.37~16.04.1
- 4.15.0-36.39~16.04.1
- 4.15.0-38.41~16.04.1
- 4.15.0-39.42~16.04.1
- 4.15.0-42.45~16.04.1
- 4.15.0-43.46~16.04.1
- 4.15.0-45.48~16.04.1
- 4.15.0-46.49~16.04.1
- Intervalos de versiones afectados
- ECOSYSTEM: < 4.15.0-47.50~16.04.1
Actualiza a 4.15.0-47.50~16.04.1
linux-oracle Ubuntu:16.04:LTS
- Versiones
- 4.15.0-1007.9~16.04.1
- 4.15.0-1008.10~16.04.1
- 4.15.0-1009.11~16.04.1
- Intervalos de versiones afectados
- ECOSYSTEM: < 4.15.0-1010.12~16.04.1
Actualiza a 4.15.0-1010.12~16.04.1
linux Ubuntu:18.04:LTS
- Versiones
- 4.13.0-16.19
- 4.13.0-17.20
- 4.13.0-25.29
- 4.13.0-32.35
- 4.15.0-10.11
- 4.15.0-12.13
- 4.15.0-13.14
- 4.15.0-15.16
- 4.15.0-19.20
- 4.15.0-20.21
- 4.15.0-22.24
- 4.15.0-23.25
- 4.15.0-24.26
- 4.15.0-29.31
- 4.15.0-30.32
- 4.15.0-32.35
- 4.15.0-33.36
- 4.15.0-34.37
- 4.15.0-36.39
- 4.15.0-38.41
- 4.15.0-39.42
- 4.15.0-42.45
- 4.15.0-43.46
- 4.15.0-44.47
- 4.15.0-45.48
- 4.15.0-46.49
- Intervalos de versiones afectados
- ECOSYSTEM: < 4.15.0-47.50
Actualiza a 4.15.0-47.50
linux-aws Ubuntu:18.04:LTS
- Versiones
- 4.15.0-1001.1
- 4.15.0-1003.3
- 4.15.0-1005.5
- 4.15.0-1006.6
- 4.15.0-1007.7
- 4.15.0-1009.9
- 4.15.0-1010.10
- 4.15.0-1011.11
- 4.15.0-1016.16
- 4.15.0-1017.17
- 4.15.0-1019.19
- 4.15.0-1020.20
- 4.15.0-1021.21
- 4.15.0-1023.23
- 4.15.0-1025.25
- 4.15.0-1027.27
- 4.15.0-1029.30
- 4.15.0-1031.33
- 4.15.0-1032.34
- 4.15.0-1033.35
- 4.15.0-1034.36
- Intervalos de versiones afectados
- ECOSYSTEM: < 4.15.0-1035.37
Actualiza a 4.15.0-1035.37
linux-azure Ubuntu:18.04:LTS
- Versiones
- 4.15.0-1002.2
- 4.15.0-1003.3
- 4.15.0-1004.4
- 4.15.0-1008.8
- 4.15.0-1009.9
- 4.15.0-1012.12
- 4.15.0-1013.13
- 4.15.0-1014.14
- 4.15.0-1018.18
- 4.15.0-1019.19
- 4.15.0-1021.21
- 4.15.0-1022.23
- 4.15.0-1023.24
- 4.15.0-1025.26
- 4.15.0-1028.29
- 4.15.0-1030.31
- 4.15.0-1031.32
- 4.15.0-1032.33
- 4.15.0-1035.36
- 4.15.0-1036.38
- 4.15.0-1037.39
- Intervalos de versiones afectados
- ECOSYSTEM: < 4.18.0-1011.11~18.04.1
Actualiza a 4.18.0-1011.11~18.04.1
linux-gcp Ubuntu:18.04:LTS
- Versiones
- 4.15.0-1001.1
- 4.15.0-1003.3
- 4.15.0-1005.5
- 4.15.0-1006.6
- 4.15.0-1008.8
- 4.15.0-1009.9
- 4.15.0-1010.10
- 4.15.0-1014.14
- 4.15.0-1015.15
- 4.15.0-1017.18
- 4.15.0-1018.19
- 4.15.0-1019.20
- 4.15.0-1021.22
- 4.15.0-1023.24
- 4.15.0-1024.25
- 4.15.0-1025.26
- 4.15.0-1026.27
- 4.15.0-1027.28
- 4.15.0-1028.29
- Intervalos de versiones afectados
- ECOSYSTEM: < 4.15.0-1029.31
Actualiza a 4.15.0-1029.31
linux-kvm Ubuntu:18.04:LTS
- Versiones
- 4.15.0-1002.2
- 4.15.0-1003.3
- 4.15.0-1004.4
- 4.15.0-1006.6
- 4.15.0-1008.8
- 4.15.0-1010.10
- 4.15.0-1011.11
- 4.15.0-1012.12
- 4.15.0-1016.16
- 4.15.0-1017.17
- 4.15.0-1019.19
- 4.15.0-1020.20
- 4.15.0-1021.21
- 4.15.0-1023.23
- 4.15.0-1025.25
- 4.15.0-1026.26
- 4.15.0-1027.27
- 4.15.0-1028.28
- 4.15.0-1029.29
- 4.15.0-1030.30
- Intervalos de versiones afectados
- ECOSYSTEM: < 4.15.0-1031.31
Actualiza a 4.15.0-1031.31
linux-oem Ubuntu:18.04:LTS
- Versiones
- 4.15.0-1002.3
- 4.15.0-1004.5
- 4.15.0-1006.9
- 4.15.0-1008.11
- 4.15.0-1009.12
- 4.15.0-1012.15
- 4.15.0-1013.16
- 4.15.0-1015.18
- 4.15.0-1017.20
- 4.15.0-1018.21
- 4.15.0-1021.24
- 4.15.0-1024.29
- 4.15.0-1026.31
- 4.15.0-1028.33
- 4.15.0-1030.35
- 4.15.0-1033.38
- 4.15.0-1034.39
- Intervalos de versiones afectados
- ECOSYSTEM: < 4.15.0-1035.40
Actualiza a 4.15.0-1035.40
linux-oracle Ubuntu:18.04:LTS
- Versiones
- 4.15.0-1007.9
- 4.15.0-1008.10
- 4.15.0-1009.11
- Intervalos de versiones afectados
- ECOSYSTEM: < 4.15.0-1010.12
Actualiza a 4.15.0-1010.12
linux-raspi2 Ubuntu:18.04:LTS
- Versiones
- 4.13.0-1005.5
- 4.13.0-1006.6
- 4.13.0-1008.8
- 4.15.0-1006.7
- 4.15.0-1009.10
- 4.15.0-1010.11
- 4.15.0-1011.12
- 4.15.0-1012.13
- 4.15.0-1013.14
- 4.15.0-1017.18
- 4.15.0-1018.19
- 4.15.0-1020.22
- 4.15.0-1021.23
- 4.15.0-1022.24
- 4.15.0-1024.26
- 4.15.0-1026.28
- 4.15.0-1027.29
- 4.15.0-1028.30
- 4.15.0-1029.31
- 4.15.0-1030.32
- 4.15.0-1031.33
- 4.15.0-1032.34
- Intervalos de versiones afectados
- ECOSYSTEM: < 4.15.0-1033.35
Actualiza a 4.15.0-1033.35
Fuentes originales
- http://www.securitytracker.com/id/1041397
- https://lists.debian.org/debian-lts-announce/2018/10/msg00003.html
- https://xenbits.xen.org/xsa/advisory-274.html
- http://www.securityfocus.com/bid/104924
- https://www.debian.org/security/2018/dsa-4308
- https://usn.ubuntu.com/3931-1/
- https://usn.ubuntu.com/3931-2/
- https://nvd.nist.gov/vuln/detail/CVE-2018-14678