Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1110 CNY

100%
Buy Us a Coffee

CVE-2018-7757

EPSS 0.10% · P27
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2018-7757

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Memory leak in the sas_smp_get_phy_events function in drivers/scsi/libsas/sas_expander.c in the Linux kernel through 4.15.7 allows local users to cause a denial of service (memory consumption) via many read accesses to files in the /sys/class/sas_phy directory, as demonstrated by the /sys/class/sas_phy/phy-1:0:12/invalid_dword_count file.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。 Linux kernel 4.15.7及之前版本中的drivers/scsi/libsas/sas_expander.c文件的‘sas_smp_get_phy_events’函数存在内存泄露漏洞。本地攻击者可借助/sys/class/sas_phy目录下文件的读取权限利用该漏洞造成拒绝服务（内存消耗）。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2018-7757

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2018-7757

请登录查看更多情报信息。

Patches & Fixes for CVE-2018-7757 (2)

Vendor Advisories for CVE-2018-7757 (12)

Mailing List Discussions for CVE-2018-7757 (1)

Same Patch Batch · n/a · 2018-03-08 · 47 CVEs total

CVE-2018-7871libming 缓冲区错误漏洞
CVE-2018-7874libming 安全漏洞
CVE-2018-7876libming 安全漏洞
CVE-2014-7272Simple Desktop Display Manager 权限许可和访问控制漏洞
CVE-2018-5313Rapid Scada 安全漏洞
CVE-2018-7183NTP ntpq 缓冲区错误漏洞
CVE-2018-7889Calibre 安全漏洞
CVE-2018-7890Zoho ManageEngine Applications Manager 命令注入漏洞
CVE-2014-7271Simple Desktop Display Manager 安全漏洞
CVE-2018-7872libming 安全漏洞
CVE-2018-7873libming 缓冲区错误漏洞
CVE-2018-7870libming 安全漏洞
CVE-2018-7869libming 安全漏洞
CVE-2018-7868libming 缓冲区错误漏洞
CVE-2018-7867libming 缓冲区错误漏洞
CVE-2018-7866libming 安全漏洞
CVE-2018-1220EMC RSA Archer 安全漏洞
CVE-2018-1219EMC RSA Archer 访问控制错误漏洞
CVE-2018-1216多款Dell产品vApp Manager 安全漏洞
CVE-2018-1215多款Dell产品安全漏洞

Showing top 20 of 47 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2018-7757

No comments yet

Leave a comment