PT-2017-11700 · Linux · Linux Kernel

Published 2017-11-16 · Updated 2019-10-03 · CVE-2017-11038

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue concerns the processing of the boot image header in the Linux kernel, used by various Android releases from CAF. It is possible to bypass range checks by supplying different versions of the header at the time of the check and use.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2017-11038

Affected Products

Linux Kernel

References · 2

• https://source.android.com/security/bulletin/pixel/2017-11-01 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-11038 · Security Note