PT-2017-2720 · Linux+3 · Linux Kernel+3
Published
2017-08-02
·
Updated
2023-01-19
·
CVE-2017-12762
CVSS v2.0
10
Critical
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions 3.18-stable through 4.12-stable
Description
The issue is caused by a buffer overflow in the Linux kernel due to a user-controlled buffer being copied into a local buffer of constant size using the
strcpy function without a length check. This can allow a remote attacker to cause buffer overflows, potentially impacting the confidentiality, integrity, and availability of protected information.Recommendations
For Linux kernel versions 3.18-stable through 4.12-stable, consider applying a patch that adds length checks to the
strcpy function to prevent buffer overflows.
As a temporary workaround, consider restricting access to the /drivers/isdn/i4l/isdn net.c driver to minimize the risk of exploitation.Fix
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Linux Kernel
Suse
Ubuntu