The Linux kernel, as used in Ubuntu 18.04 LTS and Ubuntu 18.10, allows local users to obtain names of files in which they would not normally be able to access via an overlayfs mount inside of a user namespace.
CVSS Details
- CVSS 3.0 Base Score: 3.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-4.15.0-42-snapdragonUpgrade linux-image-4.18.0-12-snapdragonUpgrade linux-image-4.18.0-1007-raspi2Upgrade linux-image-generic-lpaeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1029-raspi2Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-lowlatencyUpgrade linux-image-genericUpgrade linux-image-4.15.0-1025-gcpUpgrade linux-image-gkeUpgrade linux-image-snapdragonUpgrade linux-image-4.18.0-1005-kvmUpgrade linux-image-4.15.0-42-lowlatencyUpgrade linux-image-oemUpgrade linux-image-4.18.0-1006-awsUpgrade linux-image-4.15.0-1029-awsUpgrade linux-image-gcpUpgrade linux-image-4.18.0-12-genericUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.18.0-1004-gcpUpgrade linux-image-raspi2Upgrade linux-image-awsUpgrade linux-image-4.15.0-42-genericUpgrade linux-image-4.15.0-42-generic-lpaeUpgrade linux-image-4.18.0-12-lowlatencyUpgrade linux-image-4.15.0-1027-kvmUpgrade linux-image-4.18.0-12-generic-lpaeUpgrade linux-image-kvm | Dec 7, 2018 | Oct 26, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub