The Linux kernel, as used in Ubuntu 18.04 LTS and Ubuntu 18.10, allows local users to obtain names of files in which they would not normally be able to access via an overlayfs mount inside of a user namespace.
CVSS Details
- CVSS 3.0 Base Score: 3.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-raspi2Upgrade linux-image-4.18.0-12-lowlatencyUpgrade linux-image-4.15.0-1029-awsUpgrade linux-image-4.15.0-1027-kvmUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-42-generic-lpaeUpgrade linux-image-4.18.0-1006-awsUpgrade linux-image-gcpUpgrade linux-image-4.18.0-12-generic-lpaeUpgrade linux-image-4.18.0-1004-gcpUpgrade linux-image-4.15.0-42-genericUpgrade linux-image-4.18.0-12-genericUpgrade linux-image-awsUpgrade linux-image-kvmUpgrade linux-image-gkeUpgrade linux-image-oemUpgrade linux-image-4.15.0-42-snapdragonUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-4.18.0-1005-kvmUpgrade linux-image-4.15.0-42-lowlatencyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1029-raspi2Upgrade linux-image-4.15.0-1025-gcpUpgrade linux-image-4.18.0-12-snapdragonUpgrade linux-image-genericUpgrade linux-image-snapdragonUpgrade linux-image-4.18.0-1007-raspi2 | Dec 7, 2018 | Oct 26, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub
