Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2017-14156
HistorySep 05, 2017 - 5:29 p.m.

CVE-2017-14156

2017-09-0517:29:00
CWE-200
[email protected]
web.nvd.nist.gov
111
linux
kernel
cve-2017-14156
security
vulnerability
information disclosure
nvd

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

5.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

The atyfb_ioctl function in drivers/video/fbdev/aty/atyfb_base.c in the Linux kernel through 4.12.10 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory by reading locations associated with padding bytes.

Affected configurations

NVD
Node
linuxlinux_kernelRange≤4.12.10

Related

prion 1
redhatcve 1
debiancve 1
ubuntucve 1
nvd 1
cvelist 1
mageia 9
openvas 18
nessus 10
ubuntu 5
cloudfoundry 1
kitploit 1
osv 2
debian 3
photon 1
prion
prion
Design/Logic Flaw
2017-09-05 17:29:00
redhatcve
redhatcve
CVE-2017-14156
2017-09-06 08:21:00
debiancve
debiancve
CVE-2017-14156
2017-09-05 17:29:00
ubuntucve
ubuntucve
CVE-2017-14156
2017-09-05 00:00:00
nvd
nvd
CVE-2017-14156
2017-09-05 17:29:00
cvelist
cvelist
CVE-2017-14156
2017-09-05 17:00:00
mageia
mageia
Updated kernel-tmb packages fix security vulnerabilities
2017-10-24 23:09:45
Updated kernel-linus packages fix security vulnerabilities
2017-10-24 23:09:45
Updated kernel packages fix security vulnerabilities
2017-10-24 23:09:45
openvas
openvas
Mageia: Security Advisory (MGASA-2017-0386)
2022-01-28 00:00:00
Mageia: Security Advisory (MGASA-2017-0388)
2022-01-28 00:00:00
Mageia: Security Advisory (MGASA-2017-0387)
2022-01-28 00:00:00
nessus
nessus
EulerOS 2.0 SP5 : kernel (EulerOS-SA-2019-1588)
2019-05-29 00:00:00
Ubuntu 16.04 LTS : Linux kernel vulnerabilities (USN-3469-1)
2017-11-01 00:00:00
Ubuntu 14.04 LTS : Linux kernel (Xenial HWE) vulnerabilities (USN-3469-2)
2017-11-01 00:00:00
ubuntu
ubuntu
Linux kernel vulnerabilities
2017-10-31 00:00:00
Linux kernel (Xenial HWE) vulnerabilities
2017-10-31 00:00:00
Linux kernel vulnerabilities
2017-11-21 00:00:00
cloudfoundry
cloudfoundry
USN-3469-2: Linux kernel (Xenial HWE) vulnerabilities | Cloud Foundry
2017-11-27 00:00:00
kitploit
kitploit
Vision2 - Nmap's XML result parse and NVD's CPE correlation to search CVE
2017-09-08 13:30:00
osv
osv
linux - security update
2017-09-20 00:00:00
linux - security update
2017-09-19 00:00:00
debian
debian
[SECURITY] [DSA 3981-1] linux security update
2017-09-20 21:35:52
[SECURITY] [DLA 1099-1] linux security update
2017-09-20 17:47:37
[SECURITY] [DSA 3981-1] linux security update
2017-09-20 21:35:52
photon
photon
Critical Photon OS Security Update - PHSA-2017-0078
2017-10-19 00:00:00

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

5.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON
Related for CVE-2017-14156
prion1redhatcve1debiancve1ubuntucve1nvd1cvelist1mageia9openvas18nessus10ubuntu5cloudfoundry1kitploit1osv2debian3photon1