PT-2017-14981 · Linux+3 · Linux Kernel+3

Dmitry Vyukov · Publicado 2017-12-18 · Atualizado 2019-05-17 · CVE-2017-17741

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.14.8

Description The issue allows attackers to obtain potentially sensitive information from kernel memory. This is related to a write mmio stack-based out-of-bounds read in the KVM implementation, specifically in the files arch/x86/kvm/x86.c and include/trace/events/kvm.h.

Recommendations For Linux kernel versions prior to 4.14.8, update to version 4.14.8 or later to resolve the issue.

Exploit

Correção

Out of bounds Read

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

ALT-PU-2017-2819

ALT-PU-2018-1046

ALT-PU-2018-1047

ALT-PU-2018-1048

ALT-PU-2018-1991

CVE-2017-17741

DLA-1232-1

DSA-4073-1

DSA-4082-1

MGASA-2018-0062

MGASA-2018-0063

MGASA-2018-0073

MGASA-2018-0074

MGASA-2018-0076

MGASA-2018-0077

MGASA-2018-0127

OPENSUSE-SU-2018_1773-1

SUSE-SU-2018:0437-1

SUSE-SU-2018:0525-1

SUSE-SU-2018:0555-1

SUSE-SU-2018:0660-1

SUSE-SU-2018:0841-1

SUSE-SU-2018:1772-1

SUSE-SU-2018:1816-1

SUSE-SU-2018_1772-1

SUSE-SU-2019:1287-1

USN-3617-1

USN-3617-2

USN-3617-3

USN-3619-1

USN-3619-2

USN-3620-1

USN-3620-2

USN-3632-1

Produtos afetados

Alt Linux

Linux Kernel

Suse

Ubuntu

Referências · 420

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/bpf_sign_extension_priv_esc.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/rds_atomic_free_op_null_pointer_deref_priv_esc.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/solaris/local/rsh_stack_clash_priv_esc.rb · Exploit
• 🔥 https://github.com/qazbnm456/awesome-cve-poc/blob/master/CVE-2017-5754.md · Exploit
• 🔥 https://github.com/qazbnm456/awesome-cve-poc/blob/master/CVE-2017-5753.md · Exploit
• 🔥 https://github.com/qazbnm456/awesome-cve-poc/blob/master/CVE-2017-16995.md · Exploit
• 🔥 https://github.com/qazbnm456/awesome-cve-poc/blob/master/Stack-Clash.md · Exploit
• 🔥 https://github.com/Al1ex/CVE-2017-16995 · Exploit
• 🔥 https://github.com/mmxsrup/CVE-2018-3639 · Exploit
• 🔥 https://github.com/GeneBlue/CVE-2017-10661_POC · Exploit
• 🔥 https://github.com/es0j/CVE-2023-0045 · Exploit
• 🔥 https://github.com/EdwardOwusuAdjei/Spectre-PoC · Exploit
• 🔥 https://github.com/ASkyeye/CVE-2023-0045 · Exploit
• https://usn.ubuntu.com/3617-2 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2018-1128 · Nota