CVE-2018-20168

Google gVisor before 2018-08-22 reuses a pagetable in a different level with the paging-structure cache intact, which allows attackers to cause a denial of service ("physical address not valid" panic) via a crafted application.

Score

CVSS 3.0 5.5 Medium

Status

Modified - cve@mitre.org

Published

2018-12-17

Last modified

2024-08-05

Weaknesses

CWE-20

Affected products

• Gvisor (Google)

References

• https://bugs.chromium.org/p/project-zero/issues/detail?id=1674