Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Sohu0106

#45535of 53,633
5.5Total CVSS
Vulnerabilities · 1
PT-2017-13285
5.5
2017-09-05
Linux · Linux Kernel · CVE-2017-14156
**Name of the Vulnerable Software and Affected Versions** Linux kernel versions prior to 4.12.10 **Description** The issue allows local users to obtain sensitive information from kernel stack memory. This is due to the atyfb ioctl function in drivers/video/fbdev/aty/atyfb base.c not initializing a certain data structure, enabling users to read locations associated with padding bytes. **Recommendations** For Linux kernel versions prior to 4.12.10, update to version 4.12.10 or later to resolve the issue.