REDHAT-BUG-1661503
First published: Fri Dec 21 2018(Updated: )
A flaw was found in the Linux kernel that allows the userspace to call memcpy_fromiovecend() and similar functions with a zero offset and buffer length which causes the read beyond the buffer boundaries, in certain cases causing a memory access fault and a system halt by accessing invalid memory address. Note: this is a RHEL-only bug.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Red Hat Linux |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1661503#c3
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1661503
- https://lists.openvz.org/pipermail/devel/2018-December/072970.html
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1661503#c7
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1659451
- https://access.redhat.com/errata/RHSA-2019:2029
- https://access.redhat.com/errata/RHSA-2019:2043
- https://access.redhat.com/security/cve/cve-2018-16885
- https://bugzilla.redhat.com/show_bug.cgi?id=1661503
Frequently Asked Questions
What is the severity of REDHAT-BUG-1661503?
The severity of REDHAT-BUG-1661503 is considered high as it can lead to memory access faults and system halts.
How do I fix REDHAT-BUG-1661503?
To fix REDHAT-BUG-1661503, ensure you update to the latest patched version of the Red Hat Linux kernel.
What impact does REDHAT-BUG-1661503 have on system stability?
REDHAT-BUG-1661503 can cause a read beyond buffer boundaries, potentially leading to system crashes.
Which versions of the Red Hat Linux kernel are affected by REDHAT-BUG-1661503?
REDHAT-BUG-1661503 affects specific versions of the Red Hat Linux kernel where the vulnerability exists.
Is there a workaround for REDHAT-BUG-1661503 until a patch is applied?
Currently, there is no widely recommended workaround for REDHAT-BUG-1661503, so applying the patch is advised.
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2018-16885
- agent/source
- agent/severity
- agent/references
- agent/description
- agent/event
- agent/tags
- agent/softwarecombine
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/red hat
- canonical/red hat linux