Arbitrary Code Execution

2019-05-1602:50:39

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.0004 Low

EPSS

Percentile

5.1%

JSON

Linux kernel is vulnerable to arbitrary code execution attacks. An attacker could exploit a flaw in the vmw_surface_define_ioctl() function, in the drivers/gpu/drm/vmwgfx/vmwgfx_surface.c file which could allows an attacker to cause integer overflow and out-of-bounds write, and cause a denial of service (system hang or crash) or possibly gain privileges.

CPENameOperatorVersion
kernel-rteq3.10.0__514.2.2.rt56.424.el7
kernel-rteq3.10.0__693.11.1.rt56.632.el7
kernel-rteq3.10.0__514.6.1.rt56.429.el7
kernel-rteq3.10.0__693.2.2.rt56.623.el7
kernel-rteq3.10.0__693.2.1.rt56.620.el7
kerneleq3.10.0__693.11.1.el7
kerneleq3.10.0__693.el7
kerneleq3.10.0__693.5.2.p7ih.el7
kerneleq3.10.0__693.2.2.el7
kerneleq3.10.0__514.16.1.el7

Name	Operator	Version
kernel-rt	eq	3.10.0__514.2.2.rt56.424.el7
kernel-rt	eq	3.10.0__693.11.1.rt56.632.el7
kernel-rt	eq	3.10.0__514.6.1.rt56.429.el7
kernel-rt	eq	3.10.0__693.2.2.rt56.623.el7
kernel-rt	eq	3.10.0__693.2.1.rt56.620.el7
kernel	eq	3.10.0__693.11.1.el7
kernel	eq	3.10.0__693.el7
kernel	eq	3.10.0__693.5.2.p7ih.el7
kernel	eq	3.10.0__693.2.2.el7
kernel	eq	3.10.0__514.16.1.el7