CVE-2018-1000199 Memory corruption in n/a

Medium 5.5 Published 24 May 2018 Updated 5 Aug 2024

Local attackers with ptrace access can trigger memory corruption in the Linux Kernel, leading to crashes or potential code execution.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: Available

What is CVE-2018-1000199?

CVE-2018-1000199 is a medium-severity memory corruption vulnerability in Canonical Ubuntu Linux, published on 24 May 2018. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

The Linux Kernel version 3.18 contains a dangerous feature vulnerability in modify_user_hw_breakpoint() that can result in crash and possibly memory corruption. This attack appear to be exploitable via local code execution and the ability to use ptrace. This vulnerability appears to have been fixed in git commit f67b15037a7a50c57f72e69a6d59941ad90a0f0f.

Weakness: CWE-119

Which versions are affected by CVE-2018-1000199?

It affects 10 products.

Linux distribution packages (17)

`kgraft-patch-SLE12-SP3_Update_10` SUSE:Linux Enterprise Live Patching 12 SP3	All versions	`2-2.2`
`kgraft-patch-SLE12-SP3_Update_11` SUSE:Linux Enterprise Live Patching 12 SP3	All versions	`2-2.2`
`kgraft-patch-SLE12-SP3_Update_8` SUSE:Linux Enterprise Live Patching 12 SP3	All versions	`3-2.2`
`kgraft-patch-SLE12-SP3_Update_9` SUSE:Linux Enterprise Live Patching 12 SP3	All versions	`3-2.2`
`kgraft-patch-SLE12-SP1_Update_27` SUSE:Linux Enterprise Server 12 SP1-LTSS	All versions	`2-2.1`
`kgraft-patch-SLE12-SP2_Update_18` SUSE:Linux Enterprise Server 12 SP2-LTSS	All versions	`3-2.1`
`kgraft-patch-SLE12-SP2_Update_19` SUSE:Linux Enterprise Server 12 SP2-LTSS	All versions	`3-2.1`
`kgraft-patch-SLE12-SP2_Update_20` SUSE:Linux Enterprise Server 12 SP2-LTSS	All versions	`2-2.1`
`kgraft-patch-SLE12-SP2_Update_21` SUSE:Linux Enterprise Server 12 SP2-LTSS	All versions	`2-2.1`
`kgraft-patch-SLE12-SP2_Update_22` SUSE:Linux Enterprise Server 12 SP2-LTSS	All versions	`2-2.1`
`kgraft-patch-SLE12_Update_34` SUSE:Linux Enterprise Server 12-LTSS	All versions	`2-2.1`
`kgraft-patch-SLE12-SP1_Update_27` SUSE:Linux Enterprise Server for SAP Applications 12 SP1	All versions	`2-2.1`
`kgraft-patch-SLE12-SP2_Update_18` SUSE:Linux Enterprise Server for SAP Applications 12 SP2	All versions	`3-2.1`
`kgraft-patch-SLE12-SP2_Update_19` SUSE:Linux Enterprise Server for SAP Applications 12 SP2	All versions	`3-2.1`
`kgraft-patch-SLE12-SP2_Update_20` SUSE:Linux Enterprise Server for SAP Applications 12 SP2	All versions	`2-2.1`
`kgraft-patch-SLE12-SP2_Update_21` SUSE:Linux Enterprise Server for SAP Applications 12 SP2	All versions	`2-2.1`
`kgraft-patch-SLE12-SP2_Update_22` SUSE:Linux Enterprise Server for SAP Applications 12 SP2	All versions	`2-2.1`

Products include Canonical Ubuntu Linux, Debian Debian Linux, Linux kernel, Redhat Enterprise Linux, Redhat Enterprise Linux Desktop, Redhat Enterprise Linux Server and 4 more.

How do I fix CVE-2018-1000199?

Apply the vendor's patch.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2018-1000199 being exploited?

There is no known exploitation of CVE-2018-1000199 in the wild and no public exploit code.

Public exploit code: 1 proofs of concept on GitHub.

All Canonical Ubuntu Linux vulnerabilities

Sources

Also known as DEBIAN-CVE-2018-1000199, GHSA-5qx2-85hg-v5cr, SUSE-SU-2018:1223-1, SUSE-SU-2018:1225-1, SUSE-SU-2018:1238-1, SUSE-SU-2018:1239-1 and 8 more.