Lucene search

[email protected]CVE-2017-7518

HistoryJul 30, 2018 - 3:29 p.m.

CVE-2017-7518

2018-07-3015:29:00

CWE-755

CWE-250

[email protected]

web.nvd.nist.gov

173

linux

kernel

privilege escalation

kvm

cve-2017-7518

nvd

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.7%

JSON

A flaw was found in the Linux kernel before version 4.12 in the way the KVM module processed the trap flag(TF) bit in EFLAGS during emulation of the syscall instruction, which leads to a debug exception(#DB) being raised in the guest stack. A user/process inside a guest could use this flaw to potentially escalate their privileges inside the guest. Linux guests are not affected by this.

Affected configurations

Vulners

NVD

Node

redhatkernelRange≤4.12

CPENameOperatorVersion
redhat:enterprise_linuxredhat enterprise linuxeq7.0
redhat:enterprise_linux_desktopredhat enterprise linux desktopeq7.0
redhat:enterprise_linux_serverredhat enterprise linux servereq7.0
redhat:enterprise_linux_server_ausredhat enterprise linux server auseq7.4
redhat:enterprise_linux_server_eusredhat enterprise linux server euseq7.4
redhat:enterprise_linux_server_eusredhat enterprise linux server euseq7.5
redhat:enterprise_linux_workstationredhat enterprise linux workstationeq7.0

CPE	Name	Operator	Version
redhat:enterprise_linux	redhat enterprise linux	eq	7.0
redhat:enterprise_linux_desktop	redhat enterprise linux desktop	eq	7.0
redhat:enterprise_linux_server	redhat enterprise linux server	eq	7.0
redhat:enterprise_linux_server_aus	redhat enterprise linux server aus	eq	7.4
redhat:enterprise_linux_server_eus	redhat enterprise linux server eus	eq	7.4
redhat:enterprise_linux_server_eus	redhat enterprise linux server eus	eq	7.5
redhat:enterprise_linux_workstation	redhat enterprise linux workstation	eq	7.0

CNA Affected

[
  {
    "product": "Kernel:",
    "vendor": "[UNKNOWN]",
    "versions": [
      {
        "status": "affected",
        "version": "4.12"
      }
    ]
  }
]