PT-2017-10667 · Linux+5 · Linux Kernel+5

Published 2017-11-16 · Updated 2020-07-15 · CVE-2017-0861

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue in the snd pcm info function within the ALSA subsystem of the Linux kernel allows attackers to gain privileges through unspecified vectors.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALT-PU-2017-2802

ALT-PU-2017-2803

ALT-PU-2017-2808

CESA-2018_2390

CESA-2018_3083

CVE-2017-0861

DLA-1369-1

DSA-4187-1

MGASA-2018-0062

MGASA-2018-0063

MGASA-2018-0064

RHSA-2018:2390

RHSA-2018:3083

RHSA-2018:3096

RHSA-2018_2390

RHSA-2018_3083

RHSA-2018_3096

RHSA-2020:0036

SUSE-SU-2018:1080-1

SUSE-SU-2018:1172-1

SUSE-SU-2018:1220-1

SUSE-SU-2018:1221-1

SUSE-SU-2018:1222-1

SUSE-SU-2018:1224-1

SUSE-SU-2018:1226-1

SUSE-SU-2018:1227-1

SUSE-SU-2018:1228-1

SUSE-SU-2018:1229-1

SUSE-SU-2018:1230-1

SUSE-SU-2018:1231-1

SUSE-SU-2018:1232-1

SUSE-SU-2018:1233-1

SUSE-SU-2018:1234-1

SUSE-SU-2018:1235-1

SUSE-SU-2018:1236-1

SUSE-SU-2018:1237-1

SUSE-SU-2018:1240-1

SUSE-SU-2018:1241-1

SUSE-SU-2018:1242-1

SUSE-SU-2018:1243-1

SUSE-SU-2018:1244-1

SUSE-SU-2018:1245-1

SUSE-SU-2018:1247-1

SUSE-SU-2018:1248-1

SUSE-SU-2018:1250-1

SUSE-SU-2018:1251-1

SUSE-SU-2018:1252-1

SUSE-SU-2018:1253-1

SUSE-SU-2018:1254-1

SUSE-SU-2018:1255-1

SUSE-SU-2018:1256-1

SUSE-SU-2018:1257-1

SUSE-SU-2018:1259-1

SUSE-SU-2018:1260-1

SUSE-SU-2018:1261-1

SUSE-SU-2018:1262-1

SUSE-SU-2018:1263-1

SUSE-SU-2018:1264-1

SUSE-SU-2018:1266-1

SUSE-SU-2018:1267-1

SUSE-SU-2018:1268-1

SUSE-SU-2018:1269-1

SUSE-SU-2018:1270-1

SUSE-SU-2018:1272-1

SUSE-SU-2018:1273-1

SUSE-SU-2018:1309-1

SUSE-SU-2018_1222-1

SUSE-SU-2018_1224-1

SUSE-SU-2018_1226-1

SUSE-SU-2018_1227-1

SUSE-SU-2018_1229-1

SUSE-SU-2018_1230-1

SUSE-SU-2018_1231-1

SUSE-SU-2018_1232-1

SUSE-SU-2018_1233-1

SUSE-SU-2018_1234-1

SUSE-SU-2018_1235-1

SUSE-SU-2018_1236-1

SUSE-SU-2018_1237-1

SUSE-SU-2018_1241-1

SUSE-SU-2018_1242-1

SUSE-SU-2018_1243-1

SUSE-SU-2018_1244-1

SUSE-SU-2018_1245-1

SUSE-SU-2018_1247-1

SUSE-SU-2018_1250-1

SUSE-SU-2018_1251-1

SUSE-SU-2018_1253-1

SUSE-SU-2018_1254-1

SUSE-SU-2018_1255-1

SUSE-SU-2018_1256-1

SUSE-SU-2018_1257-1

SUSE-SU-2018_1259-1

SUSE-SU-2018_1261-1

SUSE-SU-2018_1262-1

SUSE-SU-2018_1264-1

SUSE-SU-2018_1266-1

SUSE-SU-2018_1267-1

SUSE-SU-2018_1268-1

SUSE-SU-2018_1269-1

SUSE-SU-2018_1272-1

SUSE-SU-2018_1273-1

USN-3583-1

USN-3583-2

USN-3617-1

USN-3617-2

USN-3617-3

USN-3619-1

USN-3619-2

USN-3632-1

Affected Products

Alt Linux

Centos

Linux Kernel

Red Hat

Suse

Ubuntu

References · 310

• https://ubuntu.com/security/CVE-2017-17448 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2017-0861 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3619-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-18203 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-17862 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3619-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2018:1251-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-16650 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2018:1266-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-0861 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2018:1228-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-7518 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-16994 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2018:1241-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-16649 · Vendor Advisory