peter bassill · operator
$ cve CVE-2017-18379 JSON

CVE-2017-18379

9.8
CRITICAL · CVSS 3.1 · EPSS 2.8% (pctl 86)

In your normal cycle

Critical by CVSS (9.8), but no sign of active exploitation.

Description

In the Linux kernel before 4.14, an out of boundary access happened in drivers/nvme/target/fc.c.

Scoring

CVSS9.8 (CRITICAL, v3.1)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS2.75% — more likely to be exploited than 86% of all CVEs
WeaknessCWE-119
On CISA KEVno
Public exploitnone known
Published2019-07-27
Last modified2026-06-17

Affected (1)

VendorProduct
linuxlinux kernel

References

→ the Explorer  ·  watch your stack  ·  NVD