4.17.5

DATE	CVE	VULNERABILITY TITLE	RISK
2018-07-27	CVE-2018-14612	NULL Pointer Dereference vulnerability in Linux Kernel An issue was discovered in the Linux kernel through 4.17.10. local low complexity linux CWE-476	5.5
2018-07-27	CVE-2018-14611	Use After Free vulnerability in multiple products An issue was discovered in the Linux kernel through 4.17.10. local low complexity linux debian CWE-416	5.5
2018-07-27	CVE-2018-14610	Out-of-bounds Write vulnerability in Linux Kernel An issue was discovered in the Linux kernel through 4.17.10. local low complexity linux CWE-787	5.5
2018-07-27	CVE-2018-14609	NULL Pointer Dereference vulnerability in multiple products An issue was discovered in the Linux kernel through 4.17.10. local low complexity linux debian canonical CWE-476	5.5
2018-07-26	CVE-2018-10881	A flaw was found in the Linux kernel's ext4 filesystem. local low complexity debian canonical linux redhat	5.5
2018-07-26	CVE-2018-10879	A flaw was found in the Linux kernel's ext4 filesystem. local low complexity canonical linux debian redhat	7.8
2018-07-26	CVE-2018-10878	A flaw was found in the Linux kernel's ext4 filesystem. local low complexity canonical linux debian redhat	7.8
2018-07-25	CVE-2018-10880	Linux kernel is vulnerable to a stack-out-of-bounds write in the ext4 filesystem code when mounting and writing to a crafted ext4 image in ext4_update_inline_data(). local low complexity debian linux redhat canonical	5.5
2018-06-12	CVE-2018-12233	Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products In the ea_get function in fs/jfs/xattr.c in the Linux kernel through 4.17.1, a memory corruption bug in JFS can be triggered by calling setxattr twice with two different extended attribute names on the same file. local low complexity linux canonical CWE-119	7.8
2018-05-21	CVE-2018-1108	Use of Insufficiently Random Values vulnerability in multiple products kernel drivers before version 4.17-rc1 are vulnerable to a weakness in the Linux kernel's implementation of random seed data. network high complexity linux canonical debian CWE-330	5.9