Lucene search

K
prionPRIOn knowledge basePRION:CVE-2017-18222
HistoryMar 08, 2018 - 2:29 p.m.

Buffer overflow

2018-03-0814:29:00
PRIOn knowledge base
www.prio-n.com
5

7.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

In the Linux kernel before 4.12, Hisilicon Network Subsystem (HNS) does not consider the ETH_SS_PRIV_FLAGS case when retrieving sset_count data, which allows local users to cause a denial of service (buffer overflow and memory corruption) or possibly have unspecified other impact, as demonstrated by incompatibility between hns_get_sset_count and ethtool_get_strings.

CPENameOperatorVersion
linux_kernellt4.12

7.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%