CVE-2018-13053 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	3.3 LOW	LOCAL	LOW	LOW	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
mitre	CNA	---				---
CVE	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 8%

Vendor	Product	Version
linux	linux_kernel	𝑥 ≤ 4.17.3
canonical	ubuntu_linux	14.04
canonical	ubuntu_linux	16.04
debian	debian_linux	8.0

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

linux

bullseye	5.10.223-1 fixed
bullseye (security)	5.10.226-1 fixed
bookworm	6.1.106-3 fixed
bookworm (security)	6.1.112-1 fixed
trixie	6.11.5-1 fixed
sid	6.11.6-1 fixed

Ubuntu Releases

Ubuntu Product

Codename

linux

disco	not-affected
cosmic	not-affected
bionic	Fixed 4.15.0-58.64 released
artful	ignored
xenial	Fixed 4.4.0-139.165 released
trusty	ignored

linux-aws

disco	not-affected
cosmic	not-affected
bionic	Fixed 4.15.0-1047.49 released
artful	dne
xenial	Fixed 4.4.0-1072.82 released
trusty	Fixed 4.4.0-1034.37 released

linux-aws-hwe

disco	dne
cosmic	dne
bionic	dne
xenial	Fixed 4.15.0-1047.49~16.04.1 released
trusty	dne

linux-azure

disco	not-affected
cosmic	not-affected
bionic	Fixed 4.18.0-1011.11~18.04.1 released
artful	dne
xenial	Fixed 4.15.0-1055.60 released
trusty	ignored

linux-azure-edge

disco	dne
cosmic	dne
bionic	Fixed 4.18.0-1011.11~18.04.1 released
artful	dne
xenial	Fixed 4.15.0-1055.60 released
trusty	dne

linux-euclid

disco	dne
cosmic	dne
bionic	dne
artful	dne
xenial	ignored
trusty	dne

linux-flo

disco	dne
cosmic	dne
bionic	dne
artful	dne
xenial	ignored
trusty	dne

linux-gcp

disco	not-affected
cosmic	not-affected
bionic	Fixed 4.15.0-1040.42 released
artful	dne
xenial	Fixed 4.15.0-1040.42~16.04.1 released
trusty	dne

linux-gcp-edge

disco	dne
cosmic	dne
bionic	Fixed 4.15.0-1040.42 released
xenial	dne
trusty	dne

linux-gke

disco	dne
cosmic	dne
bionic	dne
artful	dne
xenial	ignored
trusty	dne

linux-gke-4.15

disco	dne
bionic	Fixed 4.15.0-1040.42 released
xenial	dne
trusty	dne

linux-gke-5.0

disco	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-goldfish

disco	dne
cosmic	dne
bionic	dne
artful	dne
xenial	ignored
trusty	dne

linux-grouper

disco	dne
cosmic	dne
bionic	dne
artful	dne
xenial	dne
trusty	dne

linux-hwe

disco	dne
cosmic	dne
bionic	not-affected
artful	dne
xenial	Fixed 4.15.0-58.64~16.04.1 released
trusty	dne

linux-hwe-edge

disco	dne
cosmic	dne
bionic	not-affected
artful	dne
xenial	Fixed 4.15.0-58.64~16.04.1 released
trusty	dne

linux-kvm

disco	not-affected
cosmic	not-affected
bionic	Fixed 4.15.0-1042.42 released
artful	dne
xenial	Fixed 4.4.0-1037.43 released
trusty	dne

linux-lts-trusty

disco	dne
cosmic	dne
bionic	dne
artful	dne
xenial	dne
trusty	dne

linux-lts-utopic

disco	dne
cosmic	dne
bionic	dne
artful	dne
xenial	dne
trusty	ignored

linux-lts-vivid

disco	dne
cosmic	dne
bionic	dne
artful	dne
xenial	dne
trusty	ignored

linux-lts-wily

disco	dne
cosmic	dne
bionic	dne
artful	dne
xenial	dne
trusty	ignored

linux-lts-xenial

disco	dne
cosmic	dne
bionic	dne
artful	dne
xenial	dne
trusty	Fixed 4.4.0-139.165~14.04.1 released

linux-maguro

disco	dne
cosmic	dne
bionic	dne
artful	dne
xenial	dne
trusty	dne

linux-mako

disco	dne
cosmic	dne
bionic	dne
artful	dne
xenial	ignored
trusty	dne

linux-manta

disco	dne
cosmic	dne
bionic	dne
artful	dne
xenial	dne
trusty	dne

linux-oem

disco	Fixed 4.15.0-1050.57 released
cosmic	ignored
bionic	Fixed 4.15.0-1050.57 released
artful	dne
xenial	ignored
trusty	dne

linux-oracle

disco	Fixed 5.0.0-1004.8 released
cosmic	ignored
bionic	Fixed 4.15.0-1021.23 released
xenial	Fixed 4.15.0-1021.23~16.04.1 released
trusty	dne

linux-raspi2

disco	not-affected
cosmic	not-affected
bionic	Fixed 4.15.0-1043.46 released
artful	ignored
xenial	Fixed 4.4.0-1100.108 released
trusty	dne

linux-snapdragon

disco	not-affected
cosmic	dne
bionic	Fixed 4.15.0-1060.66 released
artful	ignored
xenial	Fixed 4.4.0-1104.109 released
trusty	dne

Common Weakness Enumeration

CWE-190 - Integer Overflow or Wraparound
The software performs a calculation that can produce an integer overflow or wraparound, when the logic assumes that the resulting value will always be larger than the original value. This can introduce other weaknesses when the calculation is used for resource management or execution control.

References

http://www.securityfocus.com/bid/104671

https://access.redhat.com/errata/RHSA-2019:0831

https://access.redhat.com/errata/RHSA-2019:2029

https://access.redhat.com/errata/RHSA-2019:2043

https://bugzilla.kernel.org/show_bug.cgi?id=200303

https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=5f936e19cc0ef97dbe3a56e9498922ad5ba1edef

https://lists.debian.org/debian-lts-announce/2019/03/msg00017.html

https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html

https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html

https://usn.ubuntu.com/3821-1/

https://usn.ubuntu.com/3821-2/

https://usn.ubuntu.com/4094-1/

https://usn.ubuntu.com/4118-1/