CVE-2017-2636

Опубликовано: 07 мар. 2017

Источник: ubuntu

Приоритет: high

EPSS Низкий

CVSS2: 6.9

CVSS3: 7

Описание

Race condition in drivers/tty/n_hdlc.c in the Linux kernel through 4.10.1 allows local users to gain privileges or cause a denial of service (double free) by setting the HDLC line discipline.

Релиз	Статус	Примечание
artful	not-affected	4.10.0-19.21
devel	not-affected	4.13.0-16.19
esm-infra-legacy/trusty	not-affected	3.13.0-112.159
esm-infra/xenial	not-affected	4.4.0-66.87
precise	released	3.2.0-124.167
precise/esm	not-affected	3.2.0-124.167
trusty	released	3.13.0-112.159
trusty/esm	not-affected	3.13.0-112.159
upstream	released	4.11~rc2
vivid/stable-phone-overlay	DNE

Показывать по

Релиз	Статус	Примечание
artful	DNE
devel	DNE
esm-infra-legacy/trusty	DNE
precise	released	3.2.0-1685.112
precise/esm	DNE	precise was released [3.2.0-1685.112]
trusty	DNE
trusty/esm	DNE
upstream	released	4.11~rc2
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE

Показывать по

Релиз	Статус	Примечание
artful	DNE
devel	DNE
esm-infra-legacy/trusty	not-affected	4.4.0-1002.2
esm-infra/xenial	not-affected	4.4.0-1007.16
precise	DNE
precise/esm	DNE
trusty	not-affected	4.4.0-1002.2
trusty/esm	not-affected	4.4.0-1002.2
upstream	released	4.11~rc2
vivid/stable-phone-overlay	DNE

Показывать по

Релиз	Статус	Примечание
artful	DNE
devel	DNE
esm-infra-legacy/trusty	not-affected	4.15.0-1023.24~14.04.1
esm-infra/xenial	not-affected	4.11.0-1009.9
precise/esm	DNE
trusty	not-affected	4.15.0-1023.24~14.04.1
trusty/esm	not-affected	4.15.0-1023.24~14.04.1
upstream	released	4.11~rc2
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE

Показывать по

Релиз	Статус	Примечание
artful	DNE
devel	DNE
esm-apps/xenial	DNE
esm-infra-legacy/trusty	DNE
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	released	4.11~rc2
vivid/ubuntu-core	DNE
xenial	not-affected	4.4.0-9019.20

Показывать по

Релиз	Статус	Примечание
artful	DNE
devel	DNE
esm-apps/xenial	DNE
esm-infra-legacy/trusty	DNE	trusty/esm was DNE [trusty was ignored]
precise	DNE
precise/esm	DNE
trusty	ignored
trusty/esm	DNE	trusty was ignored
upstream	released	4.11~rc2
vivid/stable-phone-overlay	ignored	end of life

Показывать по

Релиз	Статус	Примечание
artful	DNE
devel	DNE
esm-infra-legacy/trusty	DNE
esm-infra/xenial	not-affected	4.10.0-1004.4
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	released	4.11~rc2
vivid/ubuntu-core	DNE
xenial	not-affected	4.10.0-1004.4

Показывать по

Релиз	Статус	Примечание
artful	DNE
devel	DNE
esm-infra-legacy/trusty	DNE
precise	DNE
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	released	4.11~rc2
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE

Показывать по

Релиз	Статус	Примечание
artful	DNE
devel	DNE
esm-apps/xenial	DNE
esm-infra-legacy/trusty	DNE	trusty/esm was DNE [trusty was ignored]
precise	DNE
precise/esm	DNE
trusty	ignored
trusty/esm	DNE	trusty was ignored
upstream	released	4.11~rc2
vivid/stable-phone-overlay	DNE

Показывать по

Релиз	Статус	Примечание
artful	DNE
devel	DNE
esm-infra-legacy/trusty	DNE	trusty/esm was DNE [trusty was ignored]
precise	DNE
precise/esm	DNE
trusty	ignored
trusty/esm	DNE	trusty was ignored
upstream	released	4.11~rc2
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE

Показывать по

Релиз	Статус	Примечание
artful	DNE
devel	DNE
esm-infra-legacy/trusty	DNE
esm-infra/xenial	not-affected	4.8.0-41.44~16.04.1
precise	DNE
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	released	4.11~rc2
vivid/stable-phone-overlay	DNE

Показывать по

Релиз	Статус	Примечание
artful	DNE
devel	DNE
esm-infra-legacy/trusty	DNE
esm-infra/xenial	not-affected	4.8.0-41.44~16.04.1
precise	DNE
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	released	4.11~rc2
vivid/stable-phone-overlay	DNE

Показывать по

Релиз	Статус	Примечание
artful	DNE
devel	DNE
esm-infra-legacy/trusty	DNE
esm-infra/xenial	not-affected	4.4.0-1004.9
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	released	4.11~rc2
vivid/ubuntu-core	DNE
xenial	not-affected	4.4.0-1004.9

Показывать по

Релиз	Статус	Примечание
artful	DNE
devel	DNE
esm-infra-legacy/trusty	DNE
precise	ignored	end of life
precise/esm	DNE	precise was ignored [abandoned]
trusty	DNE
trusty/esm	DNE
upstream	released	4.11~rc2
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE

Показывать по

Релиз	Статус	Примечание
artful	DNE
devel	DNE
esm-infra-legacy/trusty	DNE
precise	ignored	end of life
precise/esm	DNE	precise was ignored [abandoned]
trusty	DNE
trusty/esm	DNE
upstream	released	4.11~rc2
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE

Показывать по

Релиз	Статус	Примечание
artful	DNE
devel	DNE
esm-infra-legacy/trusty	DNE
precise	ignored	end of life
precise/esm	DNE	precise was ignored [abandoned]
trusty	DNE
trusty/esm	DNE
upstream	released	4.11~rc2
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE

Показывать по

Релиз	Статус	Примечание
artful	DNE
devel	DNE
esm-infra-legacy/trusty	DNE
precise	ignored	end of life
precise/esm	ignored	end of life, was ignored
trusty	DNE
trusty/esm	DNE
upstream	released	4.11~rc2
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE

Показывать по

Релиз	Статус	Примечание
artful	DNE
devel	DNE
esm-infra-legacy/trusty	DNE
precise	ignored	end of life
precise/esm	ignored	end of life, was ignored
trusty	DNE
trusty/esm	DNE
upstream	released	4.11~rc2
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE

Показывать по

Релиз	Статус	Примечание
artful	DNE
devel	DNE
esm-infra-legacy/trusty	DNE
precise	ignored	end of life
precise/esm	ignored	end of life, was ignored
trusty	DNE
trusty/esm	DNE
upstream	released	4.11~rc2
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE

Показывать по

Релиз	Статус	Примечание
artful	DNE
devel	DNE
esm-infra-legacy/trusty	DNE
precise	released	3.13.0-112.159~precise1
precise/esm	not-affected	3.13.0-112.159~precise1
trusty	DNE
trusty/esm	DNE
upstream	released	4.11~rc2
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE

Показывать по

Релиз	Статус	Примечание
artful	DNE
devel	DNE
esm-infra-legacy/trusty	DNE	trusty/esm was DNE [trusty was ignored [end of standard support]]
precise	DNE
precise/esm	DNE
trusty	ignored	end of standard support
trusty/esm	DNE	trusty was ignored [end of standard support]
upstream	released	4.11~rc2
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE

Показывать по

Релиз	Статус	Примечание
artful	DNE
devel	DNE
esm-infra-legacy/trusty	DNE	trusty/esm was ignored [end of life, was needed]
precise	DNE
precise/esm	DNE
trusty	ignored	end of standard support, was needed
trusty/esm	ignored	end of life, was needed
upstream	released	4.11~rc2
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE

Показывать по

Релиз	Статус	Примечание
artful	DNE
devel	DNE
esm-infra-legacy/trusty	DNE	trusty/esm was DNE [trusty was ignored [end of standard support]]
precise	DNE
precise/esm	DNE
trusty	ignored	end of standard support
trusty/esm	DNE	trusty was ignored [end of standard support]
upstream	released	4.11~rc2
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE

Показывать по

Релиз	Статус	Примечание
artful	DNE
devel	DNE
esm-infra-legacy/trusty	not-affected	4.4.0-66.87~14.04.1
precise	DNE
precise/esm	DNE
trusty	released	4.4.0-66.87~14.04.1
trusty/esm	not-affected	4.4.0-66.87~14.04.1
upstream	released	4.11~rc2
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE

Показывать по

Релиз	Статус	Примечание
artful	DNE
devel	DNE
esm-infra-legacy/trusty	DNE	trusty/esm was DNE [trusty was ignored]
precise	DNE
precise/esm	DNE
trusty	ignored
trusty/esm	DNE	trusty was ignored
upstream	released	4.11~rc2
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE

Показывать по

Релиз	Статус	Примечание
artful	DNE
devel	DNE
esm-apps/xenial	DNE
esm-infra-legacy/trusty	DNE	trusty/esm was DNE [trusty was ignored]
precise	DNE
precise/esm	DNE
trusty	ignored
trusty/esm	DNE	trusty was ignored
upstream	released	4.11~rc2
vivid/stable-phone-overlay	ignored	end of life

Показывать по

Релиз	Статус	Примечание
artful	DNE
devel	DNE
esm-infra-legacy/trusty	DNE	trusty/esm was DNE [trusty was ignored]
precise	DNE
precise/esm	DNE
trusty	ignored
trusty/esm	DNE	trusty was ignored
upstream	released	4.11~rc2
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE

Показывать по

Релиз	Статус	Примечание
artful	DNE
devel	DNE
esm-infra-legacy/trusty	DNE
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	released	4.11~rc2
xenial	not-affected	4.13.0-1008.9
zesty	DNE

Показывать по

Релиз	Статус	Примечание
artful	DNE
devel	DNE
esm-infra-legacy/trusty	DNE
precise	ignored	end of life
precise/esm	DNE	precise was ignored [abandoned]
trusty	DNE
trusty/esm	DNE
upstream	released	4.11~rc2
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE

Показывать по

Релиз	Статус	Примечание
artful	not-affected	4.10.0-1004.6
devel	not-affected	4.13.0-1005.5
esm-infra-legacy/trusty	DNE
precise	DNE
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	released	4.11~rc2
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	ignored	end of life, was needs-triage

Показывать по

Релиз	Статус	Примечание
artful	not-affected	4.4.0-1050.54
devel	not-affected	4.4.0-1077.82
esm-infra-legacy/trusty	DNE
precise	DNE
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	released	4.11~rc2
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE

Показывать по

Релиз	Статус	Примечание
artful	DNE
devel	DNE
esm-infra-legacy/trusty	DNE
precise	released	3.2.0-1502.129
precise/esm	DNE	precise was released [3.2.0-1502.129]
trusty	DNE
trusty/esm	DNE
upstream	released	4.11~rc2
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE

Показывать по

Ссылки на источники

EPSS

Процентиль: 66%

0.00526

Низкий

6.9 Medium

CVSS2

7 High

CVSS3

Связанные уязвимости

CVE-2017-2636

CVSS3: 7.8

redhat

больше 8 лет назад

Race condition in drivers/tty/n_hdlc.c in the Linux kernel through 4.10.1 allows local users to gain privileges or cause a denial of service (double free) by setting the HDLC line discipline.

CVE-2017-2636

CVSS3: 7

nvd

больше 8 лет назад

Race condition in drivers/tty/n_hdlc.c in the Linux kernel through 4.10.1 allows local users to gain privileges or cause a denial of service (double free) by setting the HDLC line discipline.

CVE-2017-2636

CVSS3: 7

debian

больше 8 лет назад

Race condition in drivers/tty/n_hdlc.c in the Linux kernel through 4.1 ...

SUSE-SU-2017:0913-1

suse-cvrf

больше 8 лет назад

Security update for the Linux Kernel

SUSE-SU-2017:0912-1

suse-cvrf

больше 8 лет назад

Security update for the Linux Kernel

EPSS

Процентиль: 66%

0.00526

Низкий

6.9 Medium

CVSS2

7 High

CVSS3

CVE-2017-2636

Описание

Пакет linux

Пакет linux-armadaxp

Пакет linux-aws

Пакет linux-azure

Пакет linux-euclid

Пакет linux-flo

Пакет linux-gcp

Пакет linux-gke

Пакет linux-goldfish

Пакет linux-grouper

Пакет linux-hwe

Пакет linux-hwe-edge

Пакет linux-kvm

Пакет linux-linaro-omap

Пакет linux-linaro-shared

Пакет linux-linaro-vexpress

Пакет linux-lts-quantal

Пакет linux-lts-raring

Пакет linux-lts-saucy

Пакет linux-lts-trusty

Пакет linux-lts-utopic

Пакет linux-lts-vivid

Пакет linux-lts-wily

Пакет linux-lts-xenial

Пакет linux-maguro

Пакет linux-mako

Пакет linux-manta

Пакет linux-oem

Пакет linux-qcm-msm

Пакет linux-raspi2

Пакет linux-snapdragon

Пакет linux-ti-omap4

Ссылки на источники

Связанные уязвимости