exploitDog

CVE-2017-16525

Опубликовано: 04 нояб. 2017

Источник: nvd

CVSS3: 6.6

CVSS2: 7.2

EPSS Низкий

Описание

The usb_serial_console_disconnect function in drivers/usb/serial/console.c in the Linux kernel before 4.13.8 allows local users to cause a denial of service (use-after-free and system crash) or possibly have unspecified other impact via a crafted USB device, related to disconnection and failed setup.

Ссылки

http://www.securityfocus.com/bid/102028
Third Party Advisory
VDB Entry
https://github.com/torvalds/linux/commit/299d7572e46f98534033a9e65973f13ad1ce9047
Patch
Third Party Advisory
https://github.com/torvalds/linux/commit/bd998c2e0df0469707503023d50d46cf0b10c787
Patch
Third Party Advisory
https://groups.google.com/d/msg/syzkaller/cMACrmo1x0k/4KhRoUgABAAJ
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html
Mailing List
Third Party Advisory
https://usn.ubuntu.com/3583-1/
Third Party Advisory
https://usn.ubuntu.com/3583-2/
Third Party Advisory
http://www.securityfocus.com/bid/102028
Third Party Advisory
VDB Entry
https://github.com/torvalds/linux/commit/299d7572e46f98534033a9e65973f13ad1ce9047
Patch
Third Party Advisory
https://github.com/torvalds/linux/commit/bd998c2e0df0469707503023d50d46cf0b10c787
Patch
Third Party Advisory
https://groups.google.com/d/msg/syzkaller/cMACrmo1x0k/4KhRoUgABAAJ
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html
Mailing List
Third Party Advisory
https://usn.ubuntu.com/3583-1/
Third Party Advisory
https://usn.ubuntu.com/3583-2/
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 2.6.18 (включая) до 3.2.96 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 3.3 (включая) до 3.10.108 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 3.11 (включая) до 3.16.51 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 3.17 (включая) до 3.18.76 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 3.19 (включая) до 4.1.46 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 4.2 (включая) до 4.4.93 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 4.5 (включая) до 4.9.57 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 4.10 (включая) до 4.13.8 (исключая)

Конфигурация 2

cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*

EPSS

Процентиль: 2%

0.00015

Низкий

6.6 Medium

CVSS3

7.2 High

CVSS2

Дефекты

CWE-416

Связанные уязвимости

CVE-2017-16525

CVSS3: 6.6

ubuntu

больше 7 лет назад

The usb_serial_console_disconnect function in drivers/usb/serial/console.c in the Linux kernel before 4.13.8 allows local users to cause a denial of service (use-after-free and system crash) or possibly have unspecified other impact via a crafted USB device, related to disconnection and failed setup.

CVE-2017-16525

CVSS3: 4.6

redhat

больше 7 лет назад

The usb_serial_console_disconnect function in drivers/usb/serial/console.c in the Linux kernel before 4.13.8 allows local users to cause a denial of service (use-after-free and system crash) or possibly have unspecified other impact via a crafted USB device, related to disconnection and failed setup.

CVE-2017-16525

CVSS3: 6.6

debian

больше 7 лет назад

The usb_serial_console_disconnect function in drivers/usb/serial/conso ...

GHSA-5cfc-cp57-xp2m

CVSS3: 6.6

github

около 3 лет назад

The usb_serial_console_disconnect function in drivers/usb/serial/console.c in the Linux kernel before 4.13.8 allows local users to cause a denial of service (use-after-free and system crash) or possibly have unspecified other impact via a crafted USB device, related to disconnection and failed setup.

BDU:2017-02572

CVSS3: 6.6

fstec

больше 7 лет назад

Уязвимость функции usb_serial_console_disconnect (drivers/usb/serial/console.c) ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании или оказать другое воздействие

EPSS

Процентиль: 2%

0.00015

Низкий

6.6 Medium

CVSS3

7.2 High

CVSS2

Дефекты

CWE-416