Headline

CVE-2018-17182: security - Linux kernel: potential local priviledge escalation bug in vmacache code

An issue was discovered in the Linux kernel through 4.18.8. The vmacache_flush_all function in mm/vmacache.c mishandles sequence number overflows. An attacker can trigger a use-after-free (and possibly gain privileges) via certain thread creation, map, unmap, invalidation, and dereference operations.

6 years ago

CVE

Open in Source

#web #mac #windows #linux #git #php #auth

Products
- Openwall GNU/*/Linux server OS
- Linux Kernel Runtime Guard
- John the Ripper password cracker
  - Free & Open Source for any platform
  - in the cloud
  - Pro for Linux
  - Pro for macOS
- Wordlists for password cracking
- passwdqc policy enforcement
  - Free & Open Source for Unix
  - Pro for Windows (Active Directory)
- yescrypt KDF & password hashing
- yespower Proof-of-Work (PoW)
- crypt_blowfish password hashing
- phpass ditto in PHP
- tcb better password shadowing
- Pluggable Authentication Modules
- scanlogd port scan detector
- popa3d tiny POP3 daemon
- blists web interface to mailing lists
- msulogin single user mode login
- php_mt_seed mt_rand() cracker
Services
Publications
- Articles
- Presentations
Resources
- Mailing lists
- Community wiki
- Source code repositories (GitHub)
- Source code repositories (CVSweb)
- File archive & mirrors
- How to verify digital signatures
- OVE IDs
What’s new