medium5.5

CVE-2018-13096

An issue was discovered in fs/f2fs/super.c in the Linux kernel through 4.14.

Impact

An issue was discovered in fs/f2fs/super.c in the Linux kernel through 4.14. A denial of service (out-of-bounds memory access and BUG) can occur upon encountering an abnormal bitmap size when mounting a crafted f2fs image.

Affected products

Vendor	Product	Affected versions
Linux	Linux Kernel	through 4.14
Debian	Debian Linux	Version 8.0
Canonical	Ubuntu Linux	Versions 14.04, 16.04, 18.04
Opensuse	Leap	Version 42.3

Weakness classification

CWE-125 CWE-787

References

NVD record
CVE.org record
http://lists.opensuse.org/opensuse-security-announce/2018-10/msg00033.html
http://packetstormsecurity.com/files/151420/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html
https://bugzilla.kernel.org/show_bug.cgi?id=200167
https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=e34438c903b653daca2b2a7de95aed46226f8ed3
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=e34438c903b653daca2b2a7de95aed46226f8ed3
https://lists.debian.org/debian-lts-announce/2019/03/msg00017.html
https://seclists.org/bugtraq/2019/Jan/52
https://usn.ubuntu.com/3821-1/
https://usn.ubuntu.com/3821-2/
https://usn.ubuntu.com/4094-1/
https://usn.ubuntu.com/4118-1/
http://lists.opensuse.org/opensuse-security-announce/2018-10/msg00033.html
http://packetstormsecurity.com/files/151420/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html
https://bugzilla.kernel.org/show_bug.cgi?id=200167
https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=e34438c903b653daca2b2a7de95aed46226f8ed3
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=e34438c903b653daca2b2a7de95aed46226f8ed3
https://lists.debian.org/debian-lts-announce/2019/03/msg00017.html
https://seclists.org/bugtraq/2019/Jan/52
https://usn.ubuntu.com/3821-1/
https://usn.ubuntu.com/3821-2/
https://usn.ubuntu.com/4094-1/
https://usn.ubuntu.com/4118-1/