U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Vulnerability Change Records for CVE-2018-18397

Change History

Initial Analysis by NIST 2/05/2019 3:12:17 PM

Action Type Old Value New Value
Added CPE Configuration

								
							
							
						
OR
     *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions up to (excluding) 4.19.7
Added CPE Configuration

								
							
							
						
OR
     *cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:virtualization:4.0:*:*:*:*:*:*:*
Added CVSS V2

								
							
							
						
(AV:L/AC:L/Au:N/C:N/I:P/A:N)
Added CVSS V3

								
							
							
						
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Added CWE

								
							
							
						
CWE-284
Changed Reference Type
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=29ec90660d68bbdd69507c1c8b4e33aa299278b1 No Types Assigned
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=29ec90660d68bbdd69507c1c8b4e33aa299278b1 Patch, Third Party Advisory
Changed Reference Type
https://access.redhat.com/errata/RHSA-2019:0163 No Types Assigned
https://access.redhat.com/errata/RHSA-2019:0163 Third Party Advisory
Changed Reference Type
https://access.redhat.com/errata/RHSA-2019:0202 No Types Assigned
https://access.redhat.com/errata/RHSA-2019:0202 Third Party Advisory
Changed Reference Type
https://bugs.chromium.org/p/project-zero/issues/detail?id=1700 No Types Assigned
https://bugs.chromium.org/p/project-zero/issues/detail?id=1700 Exploit, Issue Tracking, Third Party Advisory
Changed Reference Type
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.87 No Types Assigned
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.87 Patch, Vendor Advisory
Changed Reference Type
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.7 No Types Assigned
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.7 Patch, Vendor Advisory
Changed Reference Type
https://github.com/torvalds/linux/commit/29ec90660d68bbdd69507c1c8b4e33aa299278b1 No Types Assigned
https://github.com/torvalds/linux/commit/29ec90660d68bbdd69507c1c8b4e33aa299278b1 Patch, Third Party Advisory