The Linux kernel, as used in Ubuntu 18.04 LTS and Ubuntu 18.10, allows local users to obtain names of files in which they would not normally be able to access via an overlayfs mount inside of a user namespace.
CVSS Details
- CVSS 3.0 Base Score: 3.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-4.18.0-12-lowlatencyUpgrade linux-image-4.18.0-12-genericUpgrade linux-image-4.15.0-1027-kvmUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-awsUpgrade linux-image-4.18.0-1006-awsUpgrade linux-image-gcpUpgrade linux-image-kvmUpgrade linux-image-4.18.0-12-generic-lpaeUpgrade linux-image-4.15.0-1029-awsUpgrade linux-image-4.15.0-42-genericUpgrade linux-image-4.15.0-42-generic-lpaeUpgrade linux-image-4.18.0-1004-gcpUpgrade linux-image-raspi2Upgrade linux-image-4.18.0-1005-kvmUpgrade linux-image-4.15.0-42-lowlatencyUpgrade linux-image-4.18.0-12-snapdragonUpgrade linux-image-generic-lpaeUpgrade linux-image-4.18.0-1007-raspi2Upgrade linux-image-gkeUpgrade linux-image-4.15.0-42-snapdragonUpgrade linux-image-snapdragonUpgrade linux-image-oemUpgrade linux-image-genericUpgrade linux-image-4.15.0-1025-gcpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1029-raspi2Upgrade linux-image-lowlatency | Dec 7, 2018 | Oct 26, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub
