CVE-2017-16911

Published: Jan 31, 2018Modified: Nov 21, 2024

4.7

Vector

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.0 / Impact: 3.6

Source: NVD

Description

The vhci_hcd driver in the Linux Kernel before version 4.14.8 and 4.4.114 allows allows local attackers to disclose kernel memory addresses. Successful exploitation requires that a USB device is attached over IP.

Affected (3)

Products: Linux: Linux Kernel

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	From 4.14.0 to 4.14.8
Linux Linux Kernel	From 4.4.0 to 4.4.114
Linux Linux Kernel	From 4.9.0 to 4.9.79

Related CWEs

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (24)

http://www.securityfocus.com/bid/102156

Source: PSIRT-CNA@flexerasoftware.com

Third Party AdvisoryVDB Entry

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.8

Source: PSIRT-CNA@flexerasoftware.com

Issue Tracking

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.114

Source: PSIRT-CNA@flexerasoftware.com

Issue Tracking

https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git/commit/drivers/usb/usbip?id=2f2d0088eb93db5c649d2a5e34a3800a8a935fc5

Source: PSIRT-CNA@flexerasoftware.com

PatchVendor Advisory

https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html

Source: PSIRT-CNA@flexerasoftware.com

https://secuniaresearch.flexerasoftware.com/advisories/80454/

Source: PSIRT-CNA@flexerasoftware.com

Third Party Advisory

https://secuniaresearch.flexerasoftware.com/secunia_research/2017-20/

Source: PSIRT-CNA@flexerasoftware.com

Third Party Advisory

https://usn.ubuntu.com/3619-1/

Source: PSIRT-CNA@flexerasoftware.com

https://usn.ubuntu.com/3619-2/

Source: PSIRT-CNA@flexerasoftware.com

https://usn.ubuntu.com/3754-1/

Source: PSIRT-CNA@flexerasoftware.com

https://www.debian.org/security/2018/dsa-4187

Source: PSIRT-CNA@flexerasoftware.com

https://www.spinics.net/lists/linux-usb/msg163480.html

Source: PSIRT-CNA@flexerasoftware.com

Issue TrackingMailing List

http://www.securityfocus.com/bid/102156

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.8

Source: af854a3a-2127-422b-91ae-364da2661108

Issue Tracking

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.114

Source: af854a3a-2127-422b-91ae-364da2661108

Issue Tracking

https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git/commit/drivers/usb/usbip?id=2f2d0088eb93db5c649d2a5e34a3800a8a935fc5

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://secuniaresearch.flexerasoftware.com/advisories/80454/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://secuniaresearch.flexerasoftware.com/secunia_research/2017-20/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://usn.ubuntu.com/3619-1/

Source: af854a3a-2127-422b-91ae-364da2661108

https://usn.ubuntu.com/3619-2/

Source: af854a3a-2127-422b-91ae-364da2661108

https://usn.ubuntu.com/3754-1/

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.debian.org/security/2018/dsa-4187

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.spinics.net/lists/linux-usb/msg163480.html

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingMailing List

Timeline

No history available yet.