DEBIAN-CVE-2018-14722

    Dashboard / Vulnerabilities / DEBIAN-CVE-2018-14722

    DEBIAN-CVE-2018-14722

    Published: 15 Aug 2018Last Modified: 1 Sept 2026
    Upstream:
    CVE-2018-14722

    Summary:

    Details: An issue was discovered in evaluate_auto_mountpoint in btrfsmaintenance-functions in btrfsmaintenance through 0.4.1. Code execution as root can occur via a specially crafted filesystem label if btrfs-{scrub,balance,trim} are set to auto in /etc/sysconfig/btrfsmaintenance (this is not the default, though).

    References: https://security-tracker.debian.org/tracker/CVE-2018-14722

    Affected packages

    Package

    Name: btrfsmaintenance

    Purl: pkg:deb/debian/btrfsmaintenance?arch=source&distro=bookworm

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -0.4.1-2

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High