CVE-2017-11176 vulnerabilities and exploits

(subscribe to this query)

7.6

CVSSv2

The regulator_ena_gpio_free function in drivers/regulator/core.c in the Linux kernel prior to 3.19 allows local users to gain privileges or cause a denial of service (use-after-free) via a crafted application.

Linux Linux Kernel Linux Linux Kernel 3.10 Google Android

7.2

CVSSv2

Linux drivers/char/lp.c Out-of-Bounds Write. Due to a missing bounds check, and the fact that parport_ptr integer is static, a 'secure boot' kernel command line adversary (can happen due to bootloader vulns, e.g. Google Nexus 6's CVE-2016-10277, where due to a vuln...

Linux Linux Kernel 4.12 Linux Linux Kernel Debian Debian Linux 8.0

4.9

CVSSv2

The vmw_gb_surface_define_ioctl function (accessible via DRM_IOCTL_VMW_GB_SURFACE_CREATE) in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux kernel up to and including 4.11.4 defines a backup_handle variable but does not give it an initial value. If one attempts to create a ...

Linux Linux Kernel

4.9

CVSSv2

The vmw_gb_surface_define_ioctl function in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux kernel up to and including 4.10.7 does not validate certain levels data, which allows local users to cause a denial of service (system hang) via a crafted ioctl call for a /dev/dri/re...

Linux Linux Kernel

7.2

CVSSv2

In the Linux kernel before version 4.12, Kerberos 5 tickets decoded when using the RXRPC keys incorrectly assumes the size of a field. This could lead to the size-remaining variable wrapping and the data pointer going over the end of the buffer. This could possibly lead to memory...

Linux Linux Kernel Debian Debian Linux 8.0 Debian Debian Linux 9.0 Redhat Enterprise Mrg 2.0

6.9

CVSSv2

Race condition in the fsnotify implementation in the Linux kernel up to and including 4.12.4 allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted application that leverages simultaneous execution of the inotify_handle_event and vfs_...

Linux Linux Kernel

1 EDB exploit4 Github repositories

7.2

CVSSv2

The Linux Kernel imposes a size restriction on the arguments and environmental strings passed through RLIMIT_STACK/RLIM_INFINITY (1/4 of the size), but does not take the argument and environment pointers into account, which allows malicious users to bypass this limitation. This a...

Linux Linux Kernel

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook