PT-2017-15448 · Linux+5 · Linux Kernel+5

Dmitry Vyukov

·

Publicado

2017-01-14

·

Atualizado

2018-08-24

·

CVE-2017-2584

CVSS v3.1

7.1

Alta

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.9.4
Description The issue allows local users to obtain sensitive information from kernel memory or cause a denial of service (use-after-free) via a crafted application that leverages instruction emulation for fxrstor, fxsave, sgdt, and sidt.
Recommendations For Linux kernel versions prior to 4.9.4, update to version 4.9.4 or later to resolve the issue.

Correção

DoS

Information Disclosure

Use After Free

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-200CWE-416

Identificadores relacionados

ALT-PU-2017-1054
ALT-PU-2017-1330
CESA-2017_1842
CVE-2017-2584
DSA-3791-1
MGASA-2017-0063
MGASA-2017-0064
MGASA-2017-0065
OPENSUSE-SU-2017_0456-1
OPENSUSE-SU-2017_0906-1
RHSA-2017:1842
RHSA-2017:2077
RHSA-2017_1842
RHSA-2017_2077
SUSE-SU-2017:0407-1
SUSE-SU-2017:0464-1
SUSE-SU-2017:0471-1
SUSE-SU-2017:0575-1
SUSE-SU-2017:1990-1
USN-3208-1
USN-3208-2
USN-3361-1
USN-3754-1

Produtos afetados

Alt Linux
Centos
Linux Kernel
Red Hat
Suse
Ubuntu