PT-2017-15051 · Linux+1 · Linux Kernel+1

Jann Horn · Publicado 2017-12-23 · Atualizado 2024-06-15 · CVE-2017-17857

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 4.14.8

Description The issue allows local users to cause a denial of service, potentially leading to memory corruption, by exploiting the mishandling of invalid variable stack read operations in the check stack boundary function.

Recommendations For Linux kernel versions through 4.14.8, update to a version later than 4.14.8 to resolve the issue.

Correção

DoS

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

ALT-PU-2018-1016

CVE-2017-17857

MGASA-2018-0062

MGASA-2018-0063

MGASA-2018-0064

OPENSUSE-SU-2024:10728-1

OPENSUSE-SU-2024:13704-1

Produtos afetados

Alt Linux

Linux Kernel

Referências · 234

• https://github.com/torvalds/linux/commit/ea25f914dc164c8d56b36147ecc86bc65f83c469 · Correção
• https://suse.com/security/cve/CVE-2017-16536 · Nota
• https://suse.com/security/cve/CVE-2019-18812 · Nota
• https://kernelnewbies.org/Linux_4.11 · Nota
• https://suse.com/security/cve/CVE-2021-26708 · Nota
• https://suse.com/security/cve/CVE-2022-1679 · Nota
• https://suse.com/security/cve/CVE-2023-6610 · Nota
• https://suse.com/security/cve/CVE-2021-33909 · Nota
• https://suse.com/security/cve/CVE-2018-8043 · Nota
• https://suse.com/security/cve/CVE-2022-3640 · Nota
• https://suse.com/security/cve/CVE-2022-28389 · Nota
• https://suse.com/security/cve/CVE-2022-44032 · Nota
• https://suse.com/security/cve/CVE-2022-1462 · Nota
• https://suse.com/security/cve/CVE-2022-1973 · Nota
• https://suse.com/security/cve/CVE-2018-10322 · Nota