CVE-2018-6559 - CVE House

Status published Low CVE-2018-6559

The Linux kernel, as used in Ubuntu 18.04 LTS and...

3.3 CVSS

Vulnerability Description

The Linux kernel, as used in Ubuntu 18.04 LTS and Ubuntu 18.10, allows local users to obtain names of files in which they would not normally be able to access via an overlayfs mount inside of a user namespace.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-6559

Check My Exposure

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

Philipp Wendler

References

More from Canonical Ltd.

View All →

CVE-2024-9313

Authd PAM module before version 0.3.5 can allow broker-managed users...

High 8.8

CVE-2024-9312

Authd, through version 0.3.6, did not sufficiently randomize user IDs...

High 7.5

CVE-2024-8287

Anbox Management Service, in versions 1.17.0 through 1.23.0, does not...

High 7.5

CVE-2024-8038

Vulnerable juju introspection abstract UNIX domain socket. An abstract UNIX...

High 7.9

CVE-2024-8037

Vulnerable juju hook tool abstract UNIX domain socket. When combined...

Medium 6.5

Affected Vendor

Canonical Ltd.

View all reports →

Affected Software

Linux kernel, as used in Ubuntu 18.04 LTS and Ubuntu 18.10

Vulnerable Versions:

4.15.0-38.41, 4.18.0-10.11

Timeline

Official Publish: October 26th, 2018

Last Modified: September 16th, 2024

Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weaknesses (CWE)

CWE-200

MITRE ATT&CK TTPs

T1213 Data from Information Repositories

Collection

T1005 Data from Local System