Published: 21/09/2017 Updated: 09/10/2019

CVSS v2 Base Score: 4.9 | Impact Score: 6.9 | Exploitability Score: 3.9

CVSS v3 Base Score: 4.4 | Impact Score: 3.6 | Exploitability Score: 0.8

VMScore: 436

Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C

A security flaw exists in the nl80211_set_rekey_data() function in net/wireless/nl80211.c in the Linux kernel up to and including 4.13.3. This function does not check whether the required attributes are present in a Netlink request. This request can be issued by a user with the CAP_NET_ADMIN capability and may result in a NULL pointer dereference and system crash.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel
debian debian linux 8.0
debian debian linux 9.0
canonical ubuntu linux 12.04
canonical ubuntu linux 14.04

Debian Bug report logs - #875881 linux: CVE-2017-1000251 Package: src:linux; Maintainer for src:linux is Debian Kernel Team <debian-kernel@listsdebianorg>; Reported by: Christoph Anton Mitterer <calestyo@scientianet> Date: Fri, 15 Sep 2017 14:42:01 UTC Severity: critical Tags: confirmed, fixed-upstream, security, ...

Several vulnerabilities have been discovered in the Linux kernel that may lead to privilege escalation, denial of service or information leaks CVE-2017-7518 Andy Lutomirski discovered that KVM is prone to an incorrect debug exception (#DB) error occurring while emulating a syscall instruction A process inside a guest can take advanta ...

Several security issues were fixed in the Linux kernel ...

A security flaw was discovered in nl80211_set_rekey_data() function in the Linux kernel since v31-rc1 through v413 This function does not check whether the required attributes are present in a netlink request This request can be issued by a user with CAP_NET_ADMIN privilege and may result in NULL dereference and a system crash ...

CWE-476 https://git.kernel.org/pub/scm/linux/kernel/git/jberg/mac80211.git/commit/?id=e785fa0a164aa11001cba931367c7f94ffaff888 https://bugzilla.redhat.com/show_bug.cgi?id=1491046 https://bugzilla.novell.com/show_bug.cgi?id=1058410 http://seclists.org/oss-sec/2017/q3/437 https://marc.info/?t=150525503100001&r=1&w=2 http://www.securityfocus.com/bid/100855 http://www.debian.org/security/2017/dsa-3981 https://usn.ubuntu.com/3583-2/https://usn.ubuntu.com/3583-1/https://nvd.nist.gov https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=875881 https://usn.ubuntu.com/3469-2/https://www.debian.org/security/./dsa-3981

CVE-2017-12153

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect