{"id":"CVE-2018-18710","published":"2018-10-27T22:00:00Z","modified":"2024-08-05T11:16:00Z","title":"An issue was discovered in the Linux kernel through 4.19","vendor":null,"product":null,"tier":"tail","description":{"text":"An issue was discovered in the Linux kernel through 4.19. An information leak in cdrom_ioctl_select_disc in drivers/cdrom/cdrom.c could be used by local attackers to read kernel memory because a cast from unsigned long to int interferes with bounds checking. This is similar to CVE-2018-10940 and CVE-2018-16658.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.00501,"percentile":0.42778,"provenance":"source"},"cwes":[],"references":[{"url":"https://usn.ubuntu.com/3848-2/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"https://usn.ubuntu.com/3847-1/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"https://usn.ubuntu.com/3847-2/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"https://usn.ubuntu.com/3849-1/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"http://www.securityfocus.com/bid/106041","tags":["vdb-entry","x_refsource_BID"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=e4f3aa2e1e67bb48dfbaaf1cad59013d5a5bc276","tags":["x_refsource_MISC"]},{"url":"https://usn.ubuntu.com/3849-2/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"https://usn.ubuntu.com/3848-1/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"https://usn.ubuntu.com/3847-3/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"https://usn.ubuntu.com/3846-1/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/03/msg00017.html","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://github.com/torvalds/linux/commit/e4f3aa2e1e67bb48dfbaaf1cad59013d5a5bc276","tags":["x_refsource_MISC"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html","tags":["mailing-list","x_refsource_MLIST"]}],"priority":{"score":8.6,"factors":[{"name":"EPSS percentile","points":8.56}]},"euvd":{"id":"EUVD-2018-10426","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-cve-2018-10940-family-cve-2018-10940","parents":[{"from":"CVE-2018-10940","to":"CVE-2018-18710","relation":"related","confidence":"medium","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"related","quote":"This is similar to CVE-2018-10940 and CVE-2018-16658.","from":"CVE.org","in":"CVE-2018-18710"},{"kind":"same-code","provenance":"machine","files":["drivers/cdrom/cdrom.c"],"commits":["https://github.com/torvalds/linux/commit/9de4ee40547fd315d4a0ed1dd15a2fa3559ad707","https://github.com/torvalds/linux/commit/e4f3aa2e1e67bb48dfbaaf1cad59013d5a5bc276"],"basis":"shared function","functions":["cdrom_device_info"]}]},{"from":"CVE-2018-16658","to":"CVE-2018-18710","relation":"related","confidence":"medium","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"related","quote":"This is similar to CVE-2018-10940 and CVE-2018-16658.","from":"CVE.org","in":"CVE-2018-18710"},{"kind":"same-code","provenance":"machine","files":["drivers/cdrom/cdrom.c"],"commits":["https://github.com/torvalds/linux/commit/8f3fafc9c2f0ece10832c25f7ffcb07c97a32ad4","https://github.com/torvalds/linux/commit/e4f3aa2e1e67bb48dfbaaf1cad59013d5a5bc276"],"basis":"shared function","functions":["cdrom_device_info"]}]}]}}