Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Freenerguo

Pesquisador deTencent
#33763de 53,635
7.8CVSS total
Vulnerabilidades · 1
PT-2017-4236
7.8
2017-07-12
Linux · Linux Kernel · CVE-2017-7541
**Name of the Vulnerable Software and Affected Versions** Linux kernel versions prior to 4.12.3 **Description** The issue is related to a buffer overflow in the `brcmf cfg80211 mgmt tx` function. This can be exploited to cause a denial of service, resulting in a system crash, or potentially to gain privileges. The exploitation involves a crafted NL80211 CMD FRAME Netlink packet. **Recommendations** For Linux kernel versions prior to 4.12.3, update to version 4.12.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the `brcmf cfg80211 mgmt tx` function in the cfg80211.c module to minimize the risk of exploitation.