PT-2017-11603 · Linux+3 · Linux Kernel+3

Anthony Perard

·

Publicado

2017-07-04

·

Atualizado

2018-09-07

·

CVE-2017-10911

CVSS v3.1

6.5

Média

VetorAV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.11.8
Description The issue allows guest OS users to obtain sensitive information from host OS (or other guest OS) kernel memory. This is achieved by leveraging the copying of uninitialized padding fields in Xen block-interface response structures.
Recommendations For Linux kernel versions prior to 4.11.8, update to version 4.11.8 or later to resolve the issue.

Correção

Information Disclosure

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

ALT-PU-2017-1854
ALT-PU-2018-1991
CVE-2017-10911
DLA-1099-1
DLA-1497-1
DSA-3920-1
DSA-3927-1
DSA-3945-1
OPENSUSE-SU-2017_2938-1
OPENSUSE-SU-2017_2941-1
SUSE-SU-2017:1795-1
SUSE-SU-2017:1812-1
SUSE-SU-2017:2924-1
SUSE-SU-2017:2936-1
SUSE-SU-2017:2946-1
SUSE-SU-2017_1795-1
SUSE-SU-2017_1812-1
SUSE-SU-2017_2924-1
USN-3414-1
USN-3414-2
USN-3468-1
USN-3468-2
USN-3468-3
USN-3469-1
USN-3469-2
USN-3470-1
USN-3470-2

Produtos afetados

Alt Linux
Linux Kernel
Suse
Ubuntu