PT-2017-18732 · Linux+3 · Linux Kernel+3

Jann Horn · Published 2017-04-13 · Updated 2018-07-09 · CVE-2017-9150

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.11.1

Description The issue concerns the do check function in the Linux kernel, which fails to restrict the output of sensitive address information. This allows local users to obtain sensitive address information via crafted bpf system calls. The do check function in kernel/bpf/verifier.c is specifically implicated, as it does not make the allow ptr leaks value available for restricting the output of the print bpf insn function.

Recommendations For Linux kernel versions prior to 4.11.1, update to version 4.11.1 or later to resolve the issue.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

ALT-PU-2017-1469

ALT-PU-2018-1991

CVE-2017-9150

OPENSUSE-SU-2017_1513-1

SUSE-SU-2017:1853-1

SUSE-SU-2017:1990-1

USN-3345-1

USN-3359-1

USN-3361-1

USN-3364-1

USN-3364-2

USN-3364-3

Affected Products

Alt Linux

Linux Kernel

Suse

Ubuntu

References · 444

• 🔥 https://exploit-db.com/exploits/42048 · Exploit
• https://github.com/torvalds/linux/commit/0d0e57697f162da4aa218b5feafe614fb666db07 · Patch
• https://cve.org/CVERecord?id=CVE-2017-9150 · Security Note
• https://ubuntu.com/security/notices/USN-3361-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-5546 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-2584 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2017-9150 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3359-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-9755 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-2596 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-9150 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3345-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-7472 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-8405 · Vendor Advisory
• https://bugs.chromium.org/p/project-zero/issues/detail?id=1251 · Patch