PT-2017-17845 · Linux+5 · Linux Kernel+5

Guoygang

+1

·

Publicado

2017-04-10

·

Atualizado

2018-07-09

·

CVE-2017-7616

CVSS v3.1

5.5

Média

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.10.9
Description The issue is related to incorrect error handling in the set mempolicy and mbind compat syscalls in mm/mempolicy.c. This allows local users to obtain sensitive information from uninitialized stack data by triggering failure of a certain bitmap operation.
Recommendations For Linux kernel versions prior to 4.10.9, update to version 4.10.9 or later to resolve the issue.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-388

Identificadores relacionados

ALT-PU-2017-1469
ALT-PU-2018-1991
CESA-2017_1842
CESA-2018_1854
CVE-2017-7616
DLA-922-1
OPENSUSE-SU-2017_1140-1
OPENSUSE-SU-2017_1215-1
RHSA-2017:1842
RHSA-2017:2077
RHSA-2017_1842
RHSA-2017_2077
RHSA-2018:1854
RHSA-2018_1854
SUSE-SU-2017:1247-1
SUSE-SU-2017:1301-1
SUSE-SU-2017:1360-1
SUSE-SU-2017:1853-1
SUSE-SU-2017:1990-1
SUSE-SU-2017:2342-1
SUSE-SU-2017:2525-1
USN-3291-1
USN-3291-2
USN-3291-3
USN-3293-1
USN-3361-1
USN-3406-1
USN-3406-2

Produtos afetados

Alt Linux
Centos
Linux Kernel
Red Hat
Suse
Ubuntu