Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2017-14954

Опубликовано: 02 окт. 2017
Источник: ubuntu
Приоритет: low
EPSS Низкий
CVSS2: 2.1
CVSS3: 5.5

Описание

The waitid implementation in kernel/exit.c in the Linux kernel through 4.13.4 accesses rusage data structures in unintended cases, which allows local users to obtain sensitive information, and bypass the KASLR protection mechanism, via a crafted system call.

РелизСтатусПримечание
artful

released

4.13.0-17.20
devel

not-affected

4.13.0-17.20
esm-infra-legacy/trusty

not-affected

esm-infra/xenial

not-affected

precise/esm

not-affected

trusty

not-affected

trusty/esm

not-affected

upstream

released

4.14~rc3
vivid/ubuntu-core

not-affected

xenial

not-affected

Показывать по

РелизСтатусПримечание
artful

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

precise/esm

DNE

trusty

DNE

trusty/esm

DNE

upstream

released

4.14~rc3
vivid/ubuntu-core

DNE

xenial

DNE

zesty

DNE

Показывать по

РелизСтатусПримечание
artful

DNE

devel

DNE

esm-infra-legacy/trusty

not-affected

esm-infra/xenial

not-affected

precise/esm

DNE

trusty

not-affected

trusty/esm

not-affected

upstream

released

4.14~rc3
vivid/ubuntu-core

DNE

xenial

not-affected

Показывать по

РелизСтатусПримечание
artful

DNE

devel

DNE

esm-infra-legacy/trusty

not-affected

4.15.0-1023.24~14.04.1
esm-infra/xenial

not-affected

4.13.0-1005.7
precise/esm

DNE

trusty

not-affected

4.15.0-1023.24~14.04.1
trusty/esm

not-affected

4.15.0-1023.24~14.04.1
upstream

released

4.14~rc3
vivid/ubuntu-core

DNE

xenial

not-affected

4.13.0-1005.7

Показывать по

РелизСтатусПримечание
artful

DNE

devel

DNE

esm-apps/xenial

DNE

esm-infra-legacy/trusty

DNE

precise/esm

DNE

trusty

DNE

trusty/esm

DNE

upstream

released

4.14~rc3
vivid/ubuntu-core

DNE

xenial

not-affected

Показывать по

РелизСтатусПримечание
artful

DNE

devel

DNE

esm-apps/xenial

DNE

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was ignored [abandoned]]
precise/esm

DNE

trusty

ignored

end of standard support
trusty/esm

DNE

trusty was ignored [abandoned]
upstream

released

4.14~rc3
vivid/ubuntu-core

DNE

xenial

ignored

end of standard support

Показывать по

РелизСтатусПримечание
artful

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/xenial

not-affected

4.13.0-1002.5
precise/esm

DNE

trusty

DNE

trusty/esm

DNE

upstream

released

4.14~rc3
vivid/ubuntu-core

DNE

xenial

not-affected

4.13.0-1002.5

Показывать по

РелизСтатусПримечание
artful

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

precise/esm

DNE

trusty

DNE

trusty/esm

DNE

upstream

released

4.14~rc3
vivid/ubuntu-core

DNE

xenial

not-affected

zesty

DNE

Показывать по

РелизСтатусПримечание
artful

DNE

devel

DNE

esm-apps/xenial

DNE

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was ignored [abandoned]]
precise/esm

DNE

trusty

ignored

end of standard support
trusty/esm

DNE

trusty was ignored [abandoned]
upstream

released

4.14~rc3
vivid/ubuntu-core

DNE

xenial

not-affected

Показывать по

РелизСтатусПримечание
artful

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was ignored [abandoned]]
precise/esm

DNE

trusty

ignored

end of standard support
trusty/esm

DNE

trusty was ignored [abandoned]
upstream

released

4.14~rc3
vivid/ubuntu-core

DNE

xenial

DNE

zesty

DNE

Показывать по

РелизСтатусПримечание
artful

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/xenial

not-affected

4.13.0-26.29~16.04.2
precise/esm

DNE

trusty

DNE

trusty/esm

DNE

upstream

released

4.14~rc3
vivid/ubuntu-core

DNE

xenial

not-affected

4.13.0-26.29~16.04.2

Показывать по

РелизСтатусПримечание
artful

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/xenial

not-affected

4.13.0-26.29~16.04.2
precise/esm

DNE

trusty

DNE

trusty/esm

DNE

upstream

released

4.14~rc3
vivid/ubuntu-core

DNE

xenial

not-affected

4.13.0-26.29~16.04.2

Показывать по

РелизСтатусПримечание
artful

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/xenial

not-affected

precise/esm

DNE

trusty

DNE

trusty/esm

DNE

upstream

released

4.14~rc3
vivid/ubuntu-core

DNE

xenial

not-affected

Показывать по

РелизСтатусПримечание
artful

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

precise/esm

DNE

trusty

DNE

trusty/esm

DNE

upstream

released

4.14~rc3
vivid/ubuntu-core

DNE

xenial

DNE

zesty

DNE

Показывать по

РелизСтатусПримечание
artful

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

precise/esm

DNE

trusty

DNE

trusty/esm

DNE

upstream

released

4.14~rc3
vivid/ubuntu-core

DNE

xenial

DNE

zesty

DNE

Показывать по

РелизСтатусПримечание
artful

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

precise/esm

DNE

trusty

DNE

trusty/esm

DNE

upstream

released

4.14~rc3
vivid/ubuntu-core

DNE

xenial

DNE

zesty

DNE

Показывать по

РелизСтатусПримечание
artful

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

precise/esm

ignored

end of life
trusty

DNE

trusty/esm

DNE

upstream

released

4.14~rc3
vivid/ubuntu-core

DNE

xenial

DNE

zesty

DNE

Показывать по

РелизСтатусПримечание
artful

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

precise/esm

ignored

end of life
trusty

DNE

trusty/esm

DNE

upstream

released

4.14~rc3
vivid/ubuntu-core

DNE

xenial

DNE

zesty

DNE

Показывать по

РелизСтатусПримечание
artful

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

precise/esm

ignored

end of life
trusty

DNE

trusty/esm

DNE

upstream

released

4.14~rc3
vivid/ubuntu-core

DNE

xenial

DNE

zesty

DNE

Показывать по

РелизСтатусПримечание
artful

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

precise/esm

not-affected

trusty

DNE

trusty/esm

DNE

upstream

released

4.14~rc3
vivid/ubuntu-core

DNE

xenial

DNE

zesty

DNE

Показывать по

РелизСтатусПримечание
artful

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was ignored [end of standard support]]
precise/esm

DNE

trusty

ignored

end of standard support
trusty/esm

DNE

trusty was ignored [end of standard support]
upstream

released

4.14~rc3
vivid/ubuntu-core

DNE

xenial

DNE

zesty

DNE

Показывать по

РелизСтатусПримечание
artful

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

trusty/esm was ignored [end of life, was needs-triage]
precise/esm

DNE

trusty

ignored

end of standard support, was needs-triage
trusty/esm

ignored

end of life, was needs-triage
upstream

released

4.14~rc3
vivid/ubuntu-core

DNE

xenial

DNE

zesty

DNE

Показывать по

РелизСтатусПримечание
artful

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was ignored [end of standard support]]
precise/esm

DNE

trusty

ignored

end of standard support
trusty/esm

DNE

trusty was ignored [end of standard support]
upstream

released

4.14~rc3
vivid/ubuntu-core

DNE

xenial

DNE

zesty

DNE

Показывать по

РелизСтатусПримечание
artful

DNE

devel

DNE

esm-infra-legacy/trusty

not-affected

precise/esm

DNE

trusty

not-affected

trusty/esm

not-affected

upstream

released

4.14~rc3
vivid/ubuntu-core

DNE

xenial

DNE

zesty

DNE

Показывать по

РелизСтатусПримечание
artful

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was ignored [abandoned]]
precise/esm

DNE

trusty

ignored

end of standard support
trusty/esm

DNE

trusty was ignored [abandoned]
upstream

released

4.14~rc3
vivid/ubuntu-core

DNE

xenial

DNE

zesty

DNE

Показывать по

РелизСтатусПримечание
artful

DNE

devel

DNE

esm-apps/xenial

DNE

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was ignored [abandoned]]
precise/esm

DNE

trusty

ignored

end of standard support
trusty/esm

DNE

trusty was ignored [abandoned]
upstream

released

4.14~rc3
vivid/ubuntu-core

DNE

xenial

ignored

end of standard support

Показывать по

РелизСтатусПримечание
artful

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was ignored [abandoned]]
precise/esm

DNE

trusty

ignored

end of standard support
trusty/esm

DNE

trusty was ignored [abandoned]
upstream

released

4.14~rc3
vivid/ubuntu-core

DNE

xenial

DNE

zesty

DNE

Показывать по

РелизСтатусПримечание
artful

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

precise/esm

DNE

trusty

DNE

trusty/esm

DNE

upstream

released

4.14~rc3
xenial

not-affected

4.13.0-1008.9
zesty

DNE

Показывать по

РелизСтатусПримечание
artful

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

precise/esm

DNE

trusty

DNE

trusty/esm

DNE

upstream

released

4.14~rc3
vivid/ubuntu-core

DNE

xenial

DNE

zesty

DNE

Показывать по

РелизСтатусПримечание
artful

released

4.13.0-1006.6
devel

not-affected

4.13.0-1006.6
esm-infra-legacy/trusty

DNE

precise/esm

DNE

trusty

DNE

trusty/esm

DNE

upstream

released

4.14~rc3
vivid/ubuntu-core

ignored

end of life
xenial

not-affected

zesty

not-affected

Показывать по

РелизСтатусПримечание
artful

not-affected

devel

not-affected

esm-infra-legacy/trusty

DNE

precise/esm

DNE

trusty

DNE

trusty/esm

DNE

upstream

released

4.14~rc3
vivid/ubuntu-core

DNE

xenial

not-affected

zesty

not-affected

Показывать по

РелизСтатусПримечание
artful

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

precise/esm

DNE

trusty

DNE

trusty/esm

DNE

upstream

released

4.14~rc3
vivid/ubuntu-core

DNE

xenial

DNE

zesty

DNE

Показывать по

EPSS

Процентиль: 76%
0.00974
Низкий

2.1 Low

CVSS2

5.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.5
redhat
больше 8 лет назад

The waitid implementation in kernel/exit.c in the Linux kernel through 4.13.4 accesses rusage data structures in unintended cases, which allows local users to obtain sensitive information, and bypass the KASLR protection mechanism, via a crafted system call.

CVSS3: 5.5
nvd
больше 8 лет назад

The waitid implementation in kernel/exit.c in the Linux kernel through 4.13.4 accesses rusage data structures in unintended cases, which allows local users to obtain sensitive information, and bypass the KASLR protection mechanism, via a crafted system call.

CVSS3: 5.5
debian
больше 8 лет назад

The waitid implementation in kernel/exit.c in the Linux kernel through ...

CVSS3: 5.5
github
больше 3 лет назад

The waitid implementation in kernel/exit.c in the Linux kernel through 4.13.4 accesses rusage data structures in unintended cases, which allows local users to obtain sensitive information, and bypass the KASLR protection mechanism, via a crafted system call.

EPSS

Процентиль: 76%
0.00974
Низкий

2.1 Low

CVSS2

5.5 Medium

CVSS3

Уязвимость CVE-2017-14954