PT-2017-14981 · Linux+3 · Linux Kernel+3

Dmitry Vyukov · Published 2017-12-18 · Updated 2019-05-17 · CVE-2017-17741

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.14.8

Description The issue allows attackers to obtain potentially sensitive information from kernel memory. This is related to a write mmio stack-based out-of-bounds read in the KVM implementation, specifically in the files arch/x86/kvm/x86.c and include/trace/events/kvm.h.

Recommendations For Linux kernel versions prior to 4.14.8, update to version 4.14.8 or later to resolve the issue.

Exploit

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

ALT-PU-2017-2819

ALT-PU-2018-1046

ALT-PU-2018-1047

ALT-PU-2018-1048

ALT-PU-2018-1991

CVE-2017-17741

DLA-1232-1

DSA-4073-1

DSA-4082-1

MGASA-2018-0062

MGASA-2018-0063

MGASA-2018-0073

MGASA-2018-0074

MGASA-2018-0076

MGASA-2018-0077

MGASA-2018-0127

OPENSUSE-SU-2018_1773-1

SUSE-SU-2018:0437-1

SUSE-SU-2018:0525-1

SUSE-SU-2018:0555-1

SUSE-SU-2018:0660-1

SUSE-SU-2018:0841-1

SUSE-SU-2018:1772-1

SUSE-SU-2018:1816-1

SUSE-SU-2018_1772-1

SUSE-SU-2019:1287-1

USN-3617-1

USN-3617-2

USN-3617-3

USN-3619-1

USN-3619-2

USN-3620-1

USN-3620-2

USN-3632-1

Affected Products

Alt Linux

Linux Kernel

Suse

Ubuntu

References · 420

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/bpf_sign_extension_priv_esc.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/rds_atomic_free_op_null_pointer_deref_priv_esc.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/solaris/local/rsh_stack_clash_priv_esc.rb · Exploit
• 🔥 https://github.com/qazbnm456/awesome-cve-poc/blob/master/CVE-2017-5754.md · Exploit
• 🔥 https://github.com/qazbnm456/awesome-cve-poc/blob/master/CVE-2017-5753.md · Exploit
• 🔥 https://github.com/qazbnm456/awesome-cve-poc/blob/master/CVE-2017-16995.md · Exploit
• 🔥 https://github.com/qazbnm456/awesome-cve-poc/blob/master/Stack-Clash.md · Exploit
• 🔥 https://github.com/Al1ex/CVE-2017-16995 · Exploit
• 🔥 https://github.com/mmxsrup/CVE-2018-3639 · Exploit
• 🔥 https://github.com/GeneBlue/CVE-2017-10661_POC · Exploit
• 🔥 https://github.com/es0j/CVE-2023-0045 · Exploit
• 🔥 https://github.com/EdwardOwusuAdjei/Spectre-PoC · Exploit
• 🔥 https://github.com/ASkyeye/CVE-2023-0045 · Exploit
• https://usn.ubuntu.com/3617-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-1000407 · Vendor Advisory