PT-2018-6363 · Linux+3 · Linux Kernel+3

Jakub Jirasek

·

Publicado

2016-03-17

·

Atualizado

2018-08-24

·

CVE-2017-16911

CVSS v3.1

4.7

Média

VetorAV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 4.14.8 Linux Kernel versions prior to 4.4.114
Description: The issue allows local attackers to disclose kernel memory addresses. Successful exploitation requires that a USB device is attached over IP.
Recommendations: For versions prior to 4.14.8, update to version 4.14.8 or later. For versions prior to 4.4.114, update to version 4.4.114 or later.

Exploit

Correção

Information Disclosure

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

ALT-PU-2016-1262
ALT-PU-2017-1299
ALT-PU-2017-2819
ALT-PU-2018-1112
CVE-2017-16911
DLA-1369-1
DSA-4187-1
MGASA-2018-0107
SUSE-SU-2018:0834-1
SUSE-SU-2018:0848-1
SUSE-SU-2018:1080-1
SUSE-SU-2018:1172-1
SUSE-SU-2018:1309-1
USN-3619-1
USN-3619-2
USN-3754-1

Produtos afetados

Alt Linux
Linux Kernel
Suse
Ubuntu