VULNERABILITY INTELLIGENCE

CVE-2018-20168

CVSS score5.5 MEDIUM
EPSS probability0.28%
CISA KEVNot currently listed
Published2018-12-17
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Description

Google gVisor before 2018-08-22 reuses a pagetable in a different level with the paging-structure cache intact, which allows attackers to cause a denial of service ("physical address not valid" panic) via a crafted application.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references