CVE-2018-5995 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	5.5 MEDIUM	LOCAL	LOW	LOW	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
mitre	CNA	---				---
CVE	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 17%

Vendor	Product	Version
linux	linux_kernel	𝑥 ≤ 4.14.14

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

linux

bullseye	5.10.223-1 fixed
bullseye (security)	5.10.226-1 fixed
bookworm	6.1.106-3 fixed
bookworm (security)	6.1.112-1 fixed
sid	6.11.5-1 fixed
trixie	6.11.5-1 fixed

Ubuntu Releases

Ubuntu Product

Codename

linux

hirsute	not-affected
groovy	not-affected
focal	not-affected
eoan	not-affected
disco	not-affected
cosmic	not-affected
bionic	not-affected
xenial	Fixed 4.4.0-222.255 released
trusty	ignored

linux-aws

hirsute	not-affected
groovy	not-affected
focal	not-affected
eoan	not-affected
disco	not-affected
cosmic	not-affected
bionic	not-affected
xenial	Fixed 4.4.0-1138.152 released
trusty	Fixed 4.4.0-1102.107 released

linux-aws-5.0

hirsute	dne
groovy	dne
focal	dne
eoan	dne
disco	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-aws-5.3

hirsute	dne
groovy	dne
focal	dne
eoan	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-aws-5.4

hirsute	dne
groovy	dne
focal	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-aws-hwe

hirsute	dne
groovy	dne
focal	dne
eoan	dne
disco	dne
cosmic	dne
bionic	dne
xenial	not-affected
trusty	dne

linux-azure

hirsute	not-affected
groovy	not-affected
focal	not-affected
eoan	not-affected
disco	not-affected
cosmic	not-affected
bionic	not-affected
xenial	Fixed 4.15.0-1013.13~16.04.2 released
trusty	not-affected

linux-azure-4.15

hirsute	dne
groovy	dne
focal	dne
eoan	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-azure-5.3

hirsute	dne
groovy	dne
focal	dne
eoan	dne
disco	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-azure-5.4

hirsute	dne
groovy	dne
focal	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-azure-edge

hirsute	dne
groovy	dne
focal	dne
eoan	dne
disco	dne
cosmic	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-dell300x

hirsute	dne
groovy	dne
focal	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-euclid

hirsute	dne
groovy	dne
focal	dne
eoan	dne
disco	dne
cosmic	dne
bionic	dne
xenial	ignored
trusty	dne

linux-flo

hirsute	dne
groovy	dne
focal	dne
eoan	dne
disco	dne
cosmic	dne
bionic	dne
xenial	ignored
trusty	dne

linux-gcp

hirsute	not-affected
groovy	not-affected
focal	not-affected
eoan	not-affected
disco	not-affected
cosmic	not-affected
bionic	not-affected
xenial	Fixed 4.15.0-1014.14~16.04.1 released
trusty	dne

linux-gcp-4.15

hirsute	dne
groovy	dne
focal	dne
eoan	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-gcp-5.3

hirsute	dne
groovy	dne
focal	dne
eoan	dne
disco	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-gcp-5.4

hirsute	dne
groovy	dne
focal	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-gcp-edge

hirsute	dne
groovy	dne
focal	dne
eoan	dne
disco	dne
cosmic	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-gke

hirsute	dne
groovy	dne
focal	not-affected
eoan	dne
disco	dne
cosmic	dne
bionic	dne
xenial	ignored
trusty	dne

linux-gke-4.15

hirsute	dne
groovy	dne
focal	dne
eoan	dne
disco	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-gke-5.0

hirsute	dne
groovy	dne
focal	dne
eoan	dne
disco	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-gke-5.3

hirsute	dne
groovy	dne
focal	dne
eoan	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-gke-5.4

hirsute	dne
groovy	dne
focal	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-gkeop

hirsute	dne
groovy	dne
focal	not-affected
bionic	dne
xenial	dne
trusty	dne

linux-gkeop-5.4

hirsute	dne
groovy	dne
focal	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-goldfish

hirsute	dne
groovy	dne
focal	dne
eoan	dne
disco	dne
cosmic	dne
bionic	dne
xenial	ignored
trusty	dne

linux-grouper

hirsute	dne
groovy	dne
focal	dne
eoan	dne
disco	dne
cosmic	dne
bionic	dne
xenial	dne
trusty	dne

linux-hwe

hirsute	dne
groovy	dne
focal	dne
eoan	dne
disco	dne
cosmic	dne
bionic	not-affected
xenial	Fixed 4.15.0-24.26~16.04.1 released
trusty	dne

linux-hwe-5.4

hirsute	dne
groovy	dne
focal	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-hwe-5.8

hirsute	dne
groovy	dne
focal	not-affected
bionic	dne
xenial	dne
trusty	dne

linux-hwe-edge

hirsute	dne
groovy	dne
focal	dne
eoan	dne
disco	dne
cosmic	dne
bionic	not-affected
xenial	Fixed 4.15.0-24.26~16.04.1 released
trusty	dne

linux-kvm

hirsute	not-affected
groovy	not-affected
focal	not-affected
eoan	not-affected
disco	not-affected
cosmic	not-affected
bionic	not-affected
xenial	Fixed 4.4.0-1103.112 released
trusty	dne

linux-lts-trusty

hirsute	dne
groovy	dne
focal	dne
eoan	dne
disco	dne
cosmic	dne
bionic	dne
xenial	dne
trusty	dne

linux-lts-utopic

hirsute	dne
groovy	dne
focal	dne
eoan	dne
disco	dne
cosmic	dne
bionic	dne
xenial	dne
trusty	ignored

linux-lts-vivid

hirsute	dne
groovy	dne
focal	dne
eoan	dne
disco	dne
cosmic	dne
bionic	dne
xenial	dne
trusty	ignored

linux-lts-wily

hirsute	dne
groovy	dne
focal	dne
eoan	dne
disco	dne
cosmic	dne
bionic	dne
xenial	dne
trusty	ignored

linux-lts-xenial

hirsute	dne
groovy	dne
focal	dne
eoan	dne
disco	dne
cosmic	dne
bionic	dne
xenial	dne
trusty	Fixed 4.4.0-222.255~14.04.1 released

linux-maguro

hirsute	dne
groovy	dne
focal	dne
eoan	dne
disco	dne
cosmic	dne
bionic	dne
xenial	dne
trusty	dne

linux-mako

hirsute	dne
groovy	dne
focal	dne
eoan	dne
disco	dne
cosmic	dne
bionic	dne
xenial	ignored
trusty	dne

linux-manta

hirsute	dne
groovy	dne
focal	dne
eoan	dne
disco	dne
cosmic	dne
bionic	dne
xenial	dne
trusty	dne

linux-oem

hirsute	dne
groovy	dne
focal	dne
eoan	not-affected
disco	not-affected
cosmic	not-affected
bionic	not-affected
xenial	ignored
trusty	dne

linux-oem-5.10

hirsute	dne
groovy	dne
focal	not-affected
bionic	dne
xenial	dne
trusty	dne

linux-oem-5.6

hirsute	dne
groovy	dne
focal	not-affected
eoan	dne
bionic	dne
xenial	dne
trusty	dne

linux-oem-osp1

hirsute	dne
groovy	dne
focal	dne
eoan	not-affected
disco	not-affected
bionic	not-affected
xenial	dne
trusty	dne

linux-oracle

hirsute	not-affected
groovy	not-affected
focal	not-affected
eoan	not-affected
disco	not-affected
cosmic	not-affected
bionic	not-affected
xenial	not-affected
trusty	dne

linux-oracle-5.0

hirsute	dne
groovy	dne
focal	dne
eoan	dne
disco	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-oracle-5.3

hirsute	dne
groovy	dne
focal	dne
eoan	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-oracle-5.4

hirsute	dne
groovy	dne
focal	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-raspi

hirsute	not-affected
groovy	not-affected
focal	not-affected
eoan	dne
bionic	dne
xenial	dne
trusty	dne

linux-raspi-5.4

hirsute	dne
groovy	dne
focal	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-raspi2

hirsute	dne
groovy	dne
focal	not-affected
eoan	not-affected
disco	not-affected
cosmic	not-affected
bionic	not-affected
xenial	ignored
trusty	dne

linux-raspi2-5.3

hirsute	dne
groovy	dne
focal	dne
eoan	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-riscv

hirsute	not-affected
groovy	not-affected
focal	not-affected
eoan	dne
bionic	dne
xenial	dne
trusty	dne

linux-snapdragon

hirsute	dne
groovy	dne
focal	dne
eoan	dne
disco	not-affected
cosmic	dne
bionic	Fixed 4.15.0-1053.57 released
xenial	ignored
trusty	dne

Common Weakness Enumeration

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References

http://www.securityfocus.com/bid/105049

https://github.com/johnsonwangqize/cve-linux/blob/master/CVE-2018-5995.md

https://lists.debian.org/debian-lts-announce/2019/05/msg00041.html

https://lists.debian.org/debian-lts-announce/2019/05/msg00042.html

https://lists.debian.org/debian-lts-announce/2019/08/msg00017.html

https://seclists.org/bugtraq/2019/Aug/18