PT-2017-3155 · Linux+2 · Linux Kernel+2
Andrey Konovalov
·
Publicado
2017-09-22
·
Atualizado
2024-03-14
·
CVE-2017-16530
CVSS v2.0
7.2
Alta
| Vetor | AV:L/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 4.13.6
Description
The issue allows local users to cause a denial of service, potentially leading to a system crash, or possibly have other unspecified impacts via a crafted USB device. This is related to the
uas driver in the Linux kernel, specifically involving drivers/usb/storage/uas-detect.h and drivers/usb/storage/uas.c. The vulnerability is caused by an out-of-bounds read in memory.Recommendations
For Linux kernel versions prior to 4.13.6, update to version 4.13.6 or later to resolve the issue. As a temporary workaround, consider restricting the use of USB devices that utilize the
uas driver until a patch is applied.Correção
DoS
Out of bounds Read
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Linux Kernel
Ubuntu