CVE-2017-8925

Опубликовано: 12 мая 2017

Источник: nvd

CVSS3: 5.5

CVSS2: 2.1

EPSS Низкий

Описание

The omninet_open function in drivers/usb/serial/omninet.c in the Linux kernel before 4.10.4 allows local users to cause a denial of service (tty exhaustion) by leveraging reference count mishandling.

Ссылки

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=30572418b445d85fcfe6c8fe84c947d2606767d8
Issue Tracking
Patch
Third Party Advisory
http://www.debian.org/security/2017/dsa-3886
Third Party Advisory
http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.4
Release Notes
Vendor Advisory
http://www.securityfocus.com/bid/98462
Third Party Advisory
VDB Entry
https://github.com/torvalds/linux/commit/30572418b445d85fcfe6c8fe84c947d2606767d8
Issue Tracking
Patch
Third Party Advisory
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=30572418b445d85fcfe6c8fe84c947d2606767d8
Issue Tracking
Patch
Third Party Advisory
http://www.debian.org/security/2017/dsa-3886
Third Party Advisory
http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.4
Release Notes
Vendor Advisory
http://www.securityfocus.com/bid/98462
Third Party Advisory
VDB Entry
https://github.com/torvalds/linux/commit/30572418b445d85fcfe6c8fe84c947d2606767d8
Issue Tracking
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия до 4.10.3 (включая)

Конфигурация 2

Одно из

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

EPSS

Процентиль: 16%

0.00051

Низкий

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-404

Связанные уязвимости

CVE-2017-8925

CVSS3: 5.5

ubuntu

около 8 лет назад

The omninet_open function in drivers/usb/serial/omninet.c in the Linux kernel before 4.10.4 allows local users to cause a denial of service (tty exhaustion) by leveraging reference count mishandling.

CVE-2017-8925

CVSS3: 5.5

redhat

больше 8 лет назад

The omninet_open function in drivers/usb/serial/omninet.c in the Linux kernel before 4.10.4 allows local users to cause a denial of service (tty exhaustion) by leveraging reference count mishandling.

CVE-2017-8925

CVSS3: 5.5

debian

около 8 лет назад

The omninet_open function in drivers/usb/serial/omninet.c in the Linux ...

GHSA-ggwg-7cch-xvww

CVSS3: 5.5

github

около 3 лет назад

The omninet_open function in drivers/usb/serial/omninet.c in the Linux kernel before 4.10.4 allows local users to cause a denial of service (tty exhaustion) by leveraging reference count mishandling.

ELSA-2020-5936

oracle-oval

больше 4 лет назад

ELSA-2020-5936: Unbreakable Enterprise kernel security update (IMPORTANT)

EPSS

Процентиль: 16%

0.00051

Низкий

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-404