Lucene search
PRIOn knowledge basePRION:CVE-2017-17712HistoryDec 16, 2017 - 1:29 a.m.
Race condition
2017-12-1601:29:00
PRIOn knowledge base
www.prio-n.com
8
The raw_sendmsg() function in net/ipv4/raw.c in the Linux kernel through 4.14.6 has a race condition in inet->hdrincl that leads to uninitialized stack pointer usage; this allows a local user to execute code and gain privileges.
| CPE | Name | Operator | Version |
|---|---|---|---|
| linux_kernel | ge | 3.19 | |
| linux_kernel | lt | 4.1.52 | |
| linux_kernel | ge | 4.2 | |
| linux_kernel | lt | 4.4.109 | |
| linux_kernel | ge | 4.5 | |
| linux_kernel | lt | 4.9.74 | |
| linux_kernel | ge | 4.10 | |
| linux_kernel | lt | 4.14.11 |
References
git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8f659a03a0ba9289b9aeb9b4470e6fb263d6f483
access.redhat.com/errata/RHSA-2018:0502
github.com/torvalds/linux/commit/8f659a03a0ba9289b9aeb9b4470e6fb263d6f483
source.android.com/security/bulletin/pixel/2018-04-01
usn.ubuntu.com/3581-1/
usn.ubuntu.com/3581-2/
usn.ubuntu.com/3581-3/
usn.ubuntu.com/3582-1/
usn.ubuntu.com/3582-2/
www.debian.org/security/2017/dsa-4073
Related
suse
suse
fedora
fedora
[SECURITY] Fedora 27 Update: kernel-4.14.7-300.fc27
2017-12-21 19:03:39
[SECURITY] Fedora 26 Update: kernel-4.14.8-200.fc26
2017-12-24 20:56:26
[SECURITY] Fedora 27 Update: kernel-4.15.17-300.fc27
2018-04-18 01:31:51
openvas
openvas
Fedora Update for kernel FEDORA-2017-f7cb245861
2017-12-22 00:00:00
Fedora Update for kernel FEDORA-2017-7810b7c59f
2017-12-25 00:00:00
Ubuntu: Security Advisory (USN-3581-3)
2018-02-23 00:00:00
nvd
nvd
CVE-2017-17712
2017-12-16 01:29:00
nessus
nessus
Fedora 27 : kernel (2017-f7cb245861)
2018-01-15 00:00:00
Fedora 26 : kernel (2017-7810b7c59f)
2017-12-26 00:00:00
Ubuntu 17.10 : linux-raspi2 vulnerabilities (USN-3581-3)
2018-02-23 00:00:00
cve
cve
CVE-2017-17712
2017-12-16 01:29:00
ubuntucve
ubuntucve
CVE-2017-17712
2017-12-15 00:00:00
cvelist
cvelist
CVE-2017-17712
2017-12-16 01:00:00
redhatcve
redhatcve
CVE-2017-17712
2017-12-18 08:49:24
debiancve
debiancve
CVE-2017-17712
2017-12-16 01:29:00
ubuntu
ubuntu
Linux kernel (Raspberry Pi 2) vulnerabilities
2018-02-23 00:00:00
Linux kernel vulnerabilities
2018-02-22 00:00:00
Linux kernel (HWE) vulnerabilities
2018-02-22 00:00:00
redhat
redhat
(RHSA-2018:0502) Important: kernel-alt security and bug fix update
2018-03-13 15:15:20
amazon
amazon
Important: kernel
2018-01-18 22:45:00
cloudfoundry
cloudfoundry
USN-3582-2: Linux kernel (Xenial HWE) vulnerabilities | Cloud Foundry
2018-03-01 00:00:00
oraclelinux
oraclelinux
Unbreakable Enterprise kernel security update
2018-02-07 00:00:00
Unbreakable Enterprise kernel security update
2018-04-18 00:00:00
archlinux
archlinux
[ASA-201801-2] linux-lts: multiple issues
2018-01-05 00:00:00
[ASA-201801-3] linux-zen: multiple issues
2018-01-05 00:00:00
[ASA-201801-1] linux: multiple issues
2018-01-05 00:00:00
photon
photon
Critical Photon OS Security Update - PHSA-2018-0009
2018-01-04 00:00:00
Important Photon OS Security Update - PHSA-2018-0150
2018-06-21 00:00:00
Critical Photon OS Security Update - PHSA-2018-0031
2018-03-29 00:00:00
osv
osv
linux - security update
2017-12-23 00:00:00
debian
debian
[SECURITY] [DSA 4073-1] linux security update
2017-12-23 20:13:29
androidsecurity
androidsecurity
Pixel / Nexus Security Bulletin—April 2018
2018-04-02 00:00:00