PT-2017-10667 · Linux+5 · Linux Kernel+5

Publicado 2017-11-16 · Atualizado 2020-07-15 · CVE-2017-0861

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue in the snd pcm info function within the ALSA subsystem of the Linux kernel allows attackers to gain privileges through unspecified vectors.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

Enumeração de Fraquezas

CWE-416

Identificadores relacionados

ALT-PU-2017-2802

ALT-PU-2017-2803

ALT-PU-2017-2808

CESA-2018_2390

CESA-2018_3083

CVE-2017-0861

DLA-1369-1

DSA-4187-1

MGASA-2018-0062

MGASA-2018-0063

MGASA-2018-0064

RHSA-2018:2390

RHSA-2018:3083

RHSA-2018:3096

RHSA-2018_2390

RHSA-2018_3083

RHSA-2018_3096

RHSA-2020:0036

SUSE-SU-2018:1080-1

SUSE-SU-2018:1172-1

SUSE-SU-2018:1220-1

SUSE-SU-2018:1221-1

SUSE-SU-2018:1222-1

SUSE-SU-2018:1224-1

SUSE-SU-2018:1226-1

SUSE-SU-2018:1227-1

SUSE-SU-2018:1228-1

SUSE-SU-2018:1229-1

SUSE-SU-2018:1230-1

SUSE-SU-2018:1231-1

SUSE-SU-2018:1232-1

SUSE-SU-2018:1233-1

SUSE-SU-2018:1234-1

SUSE-SU-2018:1235-1

SUSE-SU-2018:1236-1

SUSE-SU-2018:1237-1

SUSE-SU-2018:1240-1

SUSE-SU-2018:1241-1

SUSE-SU-2018:1242-1

SUSE-SU-2018:1243-1

SUSE-SU-2018:1244-1

SUSE-SU-2018:1245-1

SUSE-SU-2018:1247-1

SUSE-SU-2018:1248-1

SUSE-SU-2018:1250-1

SUSE-SU-2018:1251-1

SUSE-SU-2018:1252-1

SUSE-SU-2018:1253-1

SUSE-SU-2018:1254-1

SUSE-SU-2018:1255-1

SUSE-SU-2018:1256-1

SUSE-SU-2018:1257-1

SUSE-SU-2018:1259-1

SUSE-SU-2018:1260-1

SUSE-SU-2018:1261-1

SUSE-SU-2018:1262-1

SUSE-SU-2018:1263-1

SUSE-SU-2018:1264-1

SUSE-SU-2018:1266-1

SUSE-SU-2018:1267-1

SUSE-SU-2018:1268-1

SUSE-SU-2018:1269-1

SUSE-SU-2018:1270-1

SUSE-SU-2018:1272-1

SUSE-SU-2018:1273-1

SUSE-SU-2018:1309-1

SUSE-SU-2018_1222-1

SUSE-SU-2018_1224-1

SUSE-SU-2018_1226-1

SUSE-SU-2018_1227-1

SUSE-SU-2018_1229-1

SUSE-SU-2018_1230-1

SUSE-SU-2018_1231-1

SUSE-SU-2018_1232-1

SUSE-SU-2018_1233-1

SUSE-SU-2018_1234-1

SUSE-SU-2018_1235-1

SUSE-SU-2018_1236-1

SUSE-SU-2018_1237-1

SUSE-SU-2018_1241-1

SUSE-SU-2018_1242-1

SUSE-SU-2018_1243-1

SUSE-SU-2018_1244-1

SUSE-SU-2018_1245-1

SUSE-SU-2018_1247-1

SUSE-SU-2018_1250-1

SUSE-SU-2018_1251-1

SUSE-SU-2018_1253-1

SUSE-SU-2018_1254-1

SUSE-SU-2018_1255-1

SUSE-SU-2018_1256-1

SUSE-SU-2018_1257-1

SUSE-SU-2018_1259-1

SUSE-SU-2018_1261-1

SUSE-SU-2018_1262-1

SUSE-SU-2018_1264-1

SUSE-SU-2018_1266-1

SUSE-SU-2018_1267-1

SUSE-SU-2018_1268-1

SUSE-SU-2018_1269-1

SUSE-SU-2018_1272-1

SUSE-SU-2018_1273-1

USN-3583-1

USN-3583-2

USN-3617-1

USN-3617-2

USN-3617-3

USN-3619-1

USN-3619-2

USN-3632-1

Produtos afetados

Alt Linux

Centos

Linux Kernel

Red Hat

Suse

Ubuntu

Referências · 310

• https://github.com/LineageOS/android_kernel_xiaomi_msm8996/commit/16a277cca634b0ef57a6cfbd54a2ddf7a94ca51d · Nota
• https://ubuntu.com/security/CVE-2017-17448 · Aviso do Fabricante
• https://bugzilla.suse.com/1075088 · Nota
• https://security-tracker.debian.org/tracker/CVE-2017-0861 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-3619-2 · Aviso do Fabricante
• https://bugzilla.suse.com/1082091 · Nota
• https://bugzilla.suse.com/1087092 · Nota
• https://ubuntu.com/security/CVE-2017-18203 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2017-17862 · Aviso do Fabricante
• https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.10 · Nota
• https://suse.com/security/cve/CVE-2018-8897 · Nota
• https://ubuntu.com/security/notices/USN-3619-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/SUSE-SU-2018:1251-1 · Aviso do Fabricante
• https://bugzilla.suse.com/1052943 · Nota
• https://ubuntu.com/security/CVE-2017-16650 · Aviso do Fabricante