CVE-2018-6557
base-files: The MOTD update script in the base-files package in Ubuntu 18.04 LTS before 10.1ubuntu2.2, and Ubuntu 18.10 before 10...
CVE-2018-6557 is fixed in base-files on 1 platform by base-files 10.1ubuntu2.2 (version 10.1ubuntu2.2), released August 20, 2018. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Low
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0037
31st percentile
The MOTD update script in the base-files package in Ubuntu 18.04 LTS before 10.1ubuntu2.2, and Ubuntu 18.10 before 10.1ubuntu6 incorrectly handled temporary files. A local attacker could use this issue to cause a denial of service, or possibly escalate privileges if kernel symlink restrictions were disabled.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| base-files · Ubuntu 18.04.6 LTS (bionic) | 10.1ubuntu2.2 | base-files 10.1ubuntu2.2 | Aug 20, 2018 |