CVE-2018-17336

Severity: high (CVSS 7.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2018-09-22 · updated 2026-06-17
Weakness: CWE-134

Description

UDisks 2.8.0 has a format string vulnerability in udisks_log in udiskslogging.c, allowing attackers to obtain sensitive information (stack contents), cause a denial of service (memory corruption), or possibly have unspecified other impact via a malformed filesystem label, as demonstrated by %d or %n substrings.

Affected products

Canonical Ubuntu Linux: 18.04
Freedesktop Udisks: 2.8.0

References

https://access.redhat.com/errata/RHSA-2019:2178
https://github.com/storaged-project/udisks/issues/578
https://usn.ubuntu.com/3772-1/
https://access.redhat.com/errata/RHSA-2019:2178
https://github.com/storaged-project/udisks/issues/578
https://usn.ubuntu.com/3772-1/

Get alerted when CVE-2018-17336 or the next vulnerability affects your stack