UBUNTU-CVE-2018-1120

Dashboard / Vulnerabilities / UBUNTU-CVE-2018-1120

UBUNTU-CVE-2018-1120

Summary:

Details: A flaw was found affecting the Linux kernel before version 4.17. By mmap()ing a FUSE-backed file onto a process's memory containing command line arguments (or environment strings), an attacker can cause utilities from psutils or procps (such as ps, w) or any other program which makes a read() call to the /proc/<pid>/cmdline (or /proc/<pid>/environ) files to block indefinitely (denial of service) or for some controlled time (as a synchronization primitive for other attacks).

References: https://ubuntu.com/security/CVE-2018-1120, http://www.openwall.com/lists/oss-security/2018/05/17/1, https://ubuntu.com/security/notices/USN-3752-1, https://ubuntu.com/security/notices/USN-3752-2, https://ubuntu.com/security/notices/USN-3752-3, https://ubuntu.com/security/notices/USN-3910-1, https://ubuntu.com/security/notices/USN-3910-2, https://www.cve.org/CVERecord?id=CVE-2018-1120