Published: 04/11/2017 Updated: 24/08/2018

CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9

CVSS v3 Base Score: 6.6 | Impact Score: 5.9 | Exploitability Score: 0.7

VMScore: 641

Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

drivers/media/usb/dvb-usb-v2/lmedm04.c in the Linux kernel up to and including 4.13.11 allows local users to cause a denial of service (general protection fault and system crash) or possibly have unspecified other impact via a crafted USB device, related to a missing warm-start check and incorrect attach timing (dm04_lme2510_frontend_attach versus dm04_lme2510_tuner).

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel

Several security issues were fixed in the Linux kernel ...

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks CVE-2017-8824 Mohamed Ghannam discovered that the DCCP implementation did not correctly manage resources when a socket is disconnected and reconnected, potentially leading to a use-after-free ...

drivers/media/usb/dvb-usb-v2/lmedm04c in the Linux kernel through 41311 allows local users to cause a denial of service (general protection fault and system crash) or possibly have unspecified other impact via a crafted USB device, related to a missing warm-start check and incorrect attach timing (dm04_lme2510_frontend_attach versus dm04_lme2510 ...

CWE-20 https://patchwork.linuxtv.org/patch/44567/https://patchwork.linuxtv.org/patch/44566/https://groups.google.com/d/msg/syzkaller/XwNidsl4X04/ti6I2IaRBAAJ https://www.debian.org/security/2017/dsa-4073 http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html https://www.debian.org/security/2018/dsa-4082 https://usn.ubuntu.com/3631-2/https://usn.ubuntu.com/3631-1/https://usn.ubuntu.com/3754-1/https://nvd.nist.gov https://usn.ubuntu.com/3631-1/

CVE-2017-16538

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect