CVE-2018-16885 - CVE House
Back to Database
Status published Medium CVE-2018-16885

A flaw was found in the Linux kernel that allows...

Vulnerability Description

A flaw was found in the Linux kernel that allows the userspace to call memcpy_fromiovecend() and similar functions with a zero offset and buffer length which causes the read beyond the buffer boundaries, in certain cases causing a memory access fault and a system halt by accessing invalid memory address. This issue only affects kernel version 3.10.x as shipped with Red Hat Enterprise Linux 7.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-16885

Credits & Attribution

No credits recorded in the NVD database.

References

More from The Linux Foundation

View All →
CVE-2020-10751
A flaw was found in the Linux kernels SELinux LSM...
Medium 6.1
CVE-2019-3901
A race condition in perf_event_open() allows local attackers to leak...
Medium 5.6
CVE-2019-3896
A double-free can happen in idr_remove_all() in lib/idr.c in the...
High 7
CVE-2019-3887
A flaw was found in the way KVM hypervisor handled...
Medium 6.7
CVE-2019-3882
A flaw was found in the Linux kernel's vfio interface...
Medium 4.7

Affected Vendor

The Linux Foundation

View all reports →

Affected Software

kernel
Vulnerable Versions:
3.10.x as shipped with Red Hat Enterprise Linux 7

Timeline

Official Publish: January 3rd, 2019
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

CWE-125

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application
Initial Access
T1213 Data from Information Repositories
Collection
T1003 OS Credential Dumping
Credential Access
T1552 Unsecured Credentials
Credential Access