PT-2017-19065 · Linux+2 · Linux Kernel+2

Murray Mcallister · Publicado 2017-06-13 · Atualizado 2018-07-09 · CVE-2017-9605

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.11.5

Description The issue concerns the vmw gb surface define ioctl function, accessible via the DRM IOCTL VMW GB SURFACE CREATE ioctl call, which does not properly initialize a backup handle variable. This allows local users to obtain sensitive information from uninitialized kernel memory by creating a GB surface with a previously allocated DMA buffer as a backup buffer, and then making a crafted ioctl call.

Recommendations For Linux kernel versions prior to 4.11.5, update to version 4.11.5 or later to resolve the issue.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

ALT-PU-2017-1854

ALT-PU-2018-1991

CVE-2017-9605

DSA-3927-1

DSA-3945-1

MGASA-2017-0186

MGASA-2017-0187

MGASA-2017-0188

USN-3358-1

USN-3359-1

USN-3360-1

USN-3360-2

USN-3364-1

USN-3364-2

USN-3364-3

USN-3371-1

Produtos afetados

Alt Linux

Linux Kernel

Ubuntu

Referências · 63

• https://github.com/torvalds/linux/commit/07678eca2cf9c9a18584e546c2b2a0d0c9a3150c · Correção
• https://ubuntu.com/security/CVE-2015-8962 · Aviso do Fabricante
• https://osv.dev/vulnerability/USN-3360-1 · Aviso do Fabricante
• http://debian.org/security/2017/dsa-3945 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2015-8955 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2017-9605 · Aviso do Fabricante
• https://osv.dev/vulnerability/MGASA-2017-0187 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2015-8964 · Aviso do Fabricante
• https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.70 · Nota
• https://bugs.mageia.org/show_bug.cgi?id=21149 · Nota
• https://osv.dev/vulnerability/DSA-3945-1 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-3359-1 · Aviso do Fabricante
• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=07678eca2cf9c9a18584e546c2b2a0d0c9a3150c · Correção
• https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.69 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2017-9605 · Aviso do Fabricante