PT-2017-3606 · Linux+3 · Linux Kernel+3
Jakub Jirasek
·
Publicado
2015-10-06
·
Atualizado
2018-08-24
·
CVE-2017-16913
CVSS v2.0
7.1
Alta
| Vetor | AV:N/AC:M/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions:
Linux Kernel versions prior to 4.14.8
Linux Kernel versions prior to 4.9.71
Linux Kernel versions prior to 4.4.114
Description:
The issue is related to the
stub recv cmd submit() function in the Linux Kernel, which can be exploited by attackers to cause a denial of service via a specially crafted USB over IP packet. This is due to a buffer overflow in memory operations. The exploitation of this issue may allow a remote attacker to cause a denial of service.Recommendations:
For Linux Kernel versions prior to 4.14.8, update to version 4.14.8 or later.
For Linux Kernel versions prior to 4.9.71, update to version 4.9.71 or later.
For Linux Kernel versions prior to 4.4.114, update to version 4.4.114 or later.
As a temporary workaround, consider disabling the
stub recv cmd submit() function until a patch is available.Exploit
Correção
DoS
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Linux Kernel
Suse
Ubuntu