CVE-2018-1108

Published: 21/05/2018 Updated: 29/11/2022

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 5.9 | Impact Score: 3.6 | Exploitability Score: 2.2

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

kernel drivers before version 4.17-rc1 are vulnerable to a weakness in the Linux kernel's implementation of random seed data. Programs, early in the boot sequence, could use the data allocated for the seed before it was sufficiently generated.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel
canonical ubuntu linux 16.04
canonical ubuntu linux 18.04
debian debian linux 9.0

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks CVE-2017-5715 Multiple researchers have discovered a vulnerability in various processors supporting speculative execution, enabling an attacker controlling an unprivileged process to read mem ...

A regression that caused boot failures was fixed in the Linux kernel ...

Several security issues were fixed in the Linux kernel ...

A regression that caused boot failures was fixed in the Linux kernel ...

A weakness was found in the Linux kernel's implementation of random seed data Programs, early in the boot sequence, could use the data allocated for the seed before it was sufficiently generated (CVE-2018-1108) A flaw was found in the way the Linux kernel handled exceptions delivered after a stack switch operation via Mov SS or Pop SS instruction ...

There are several issues in drivers/char/randomc, in particular related to the behavior of the /dev/urandom RNG during and shortly after boot ...

CWE-330 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1108 https://www.debian.org/security/2018/dsa-4188 http://www.securityfocus.com/bid/104055 https://usn.ubuntu.com/3718-2/https://usn.ubuntu.com/3718-1/https://usn.ubuntu.com/3752-2/https://usn.ubuntu.com/3752-1/https://usn.ubuntu.com/3752-3/https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html https://nvd.nist.gov https://www.debian.org/security/./dsa-4188 https://usn.ubuntu.com/3718-2/

CVE-2018-1108

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect