SecuritySpace - CVE-2018-7273

Vulnerability Search		Search 219043 CVE descriptions and 99761 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2018-7273

Description: In the Linux kernel through 4.15.4, the floppy driver reveals the addresses of kernel functions and global variables using printk calls within the function show_floppy in drivers/block/floppy.c. An attacker can read this information from dmesg and use the addresses to find the locations of kernel code and data and bypass kernel security protections such as KASLR.

Test IDs: None available

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2018-7273
BugTraq ID: 103088
http://www.securityfocus.com/bid/103088
https://www.exploit-db.com/exploits/44325/
https://lkml.org/lkml/2018/2/20/669

CVE ID:	CVE-2018-7273
Description:	In the Linux kernel through 4.15.4, the floppy driver reveals the addresses of kernel functions and global variables using printk calls within the function show_floppy in drivers/block/floppy.c. An attacker can read this information from dmesg and use the addresses to find the locations of kernel code and data and bypass kernel security protections such as KASLR.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2018-7273 BugTraq ID: 103088 http://www.securityfocus.com/bid/103088 https://www.exploit-db.com/exploits/44325/ https://lkml.org/lkml/2018/2/20/669