CVE-2018-7566

HIGH

Linux kernel 4.15 - Buffer Overflow via SNDRV_SEQ_IOCTL_SET_CLIENT_POOL ioctl

Title source: llm
STIX 2.1

Description

The Linux kernel 4.15 has a Buffer Overflow via an SNDRV_SEQ_IOCTL_SET_CLIENT_POOL ioctl write operation to /dev/snd/seq by a local user.

References (21)

Core 21
Core References
Third Party Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/3631-2/
Third Party Advisory vendor-advisory x_refsource_debian
https://www.debian.org/security/2018/dsa-4187
Third Party Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/3631-1/
Third Party Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2018:2390
Third Party Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2018:2395
Third Party Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2018:2384
Third Party Advisory vendor-advisory x_refsource_debian
https://www.debian.org/security/2018/dsa-4188
Third Party Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2018:2948
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/103605
Mailing List, Third Party Advisory mailing-list x_refsource_mlist
https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html
Patch, Third Party Advisory mailing-list x_refsource_mlist
http://mailman.alsa-project.org/pipermail/alsa-devel/2018-February/132026.html
Third Party Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/3798-1/
Third Party Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/3798-2/
Third Party Advisory vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2018-03/msg00067.html
Vendor Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2019:1483
Vendor Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2019:1487
Issue Tracking, Patch, Third Party Advisory x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=1550142

Scores

CVSS v3 7.8
EPSS 0.0008
EPSS Percentile 22.7%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-119 CWE-362
Status published
Products (21)
canonical/ubuntu_linux 12.04
canonical/ubuntu_linux 14.04
canonical/ubuntu_linux 16.04
debian/debian_linux 7.0
debian/debian_linux 8.0
debian/debian_linux 9.0
linux/linux_kernel 4.15
oracle/communications_eagle_application_processor 16.1.0
oracle/communications_eagle_application_processor 16.2.0
redhat/enterprise_linux_desktop 6.0
... and 11 more
Published Mar 30, 2018
Tracked Since Feb 18, 2026