Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2018-1065

EPSS 0.08% · P24
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2018-1065

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The netfilter subsystem in the Linux kernel through 4.15.7 mishandles the case of a rule blob that contains a jump but lacks a user-defined chain, which allows local users to cause a denial of service (NULL pointer dereference) by leveraging the CAP_NET_RAW or CAP_NET_ADMIN capability, related to arpt_do_table in net/ipv4/netfilter/arp_tables.c, ipt_do_table in net/ipv4/netfilter/ip_tables.c, and ip6t_do_table in net/ipv6/netfilter/ip6_tables.c.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Linux kernel 代码问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel 4.15.7版本及之前版本存在代码问题漏洞，该漏洞源于错误处理了包含跳转但缺少用户定义链的规则blob的情况。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-Linux kernel 4.15.0-rc9 Linux kernel 4.15.0-rc9 -

II. Public POCs for CVE-2018-1065

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2018-1065

Please Login to view more intelligence information

Same Patch Batch · n/a · 2018-03-02 · 21 CVEs total

CVE-2018-7433WordPress iThemes Security 安全漏洞
CVE-2018-1066Linux kernel 代码问题漏洞
CVE-2018-7641CImg 缓冲区错误漏洞
CVE-2018-7640CImg 缓冲区错误漏洞
CVE-2018-7639CImg 缓冲区错误漏洞
CVE-2018-7638CImg 缓冲区错误漏洞
CVE-2018-7637CImg 缓冲区错误漏洞
CVE-2018-7643GNU Binutils 安全漏洞
CVE-2018-7642GNU Binutils Binary File Descriptor库安全漏洞
CVE-2018-7648OpenJPEG 缓冲区错误漏洞
CVE-2015-7596Gemalto SafeNet Authentication Service End User Software Tools for Windows 安全漏洞
CVE-2015-7967Gemalto SafeNet Authentication Service for Citrix Web Interface Agent 安全漏洞
CVE-2015-7966Gemalto SafeNet Authentication Service Windows Logon Agent 安全漏洞
CVE-2015-7965Gemalto SafeNet Authentication Service Windows Logon Agent 安全漏洞
CVE-2015-7964Gemalto SafeNet Authentication Service for NPS Agent 安全漏洞
CVE-2015-7963Gemalto SafeNet Authentication Service for AD FS Agent 安全漏洞
CVE-2015-7962Gemalto SafeNet Authentication Service for Outlook Web App Agent 安全漏洞
CVE-2015-7961Gemalto SafeNet Authentication Service Remote Web Workplace Agent 安全漏洞
CVE-2015-7598Gemalto SafeNet Authentication Service TokenValidator Proxy Agent 安全漏洞
CVE-2015-7597Gemalto SafeNet Authentication Service IIS Agent 安全漏洞

IV. Related Vulnerabilities

Same vendor: n/a

V. Comments for CVE-2018-1065

No comments yet

Leave a comment