Published: 12/10/2017 Updated: 16/03/2018

CVSS v2 Base Score: 4.9 | Impact Score: 6.9 | Exploitability Score: 3.9

CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8

VMScore: 437

Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C

security/keys/keyctl.c in the Linux kernel prior to 4.11.5 does not consider the case of a NULL payload in conjunction with a nonzero length value, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) via a crafted add_key or keyctl system call, a different vulnerability than CVE-2017-12192.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel

Synopsis Important: kernel security, bug fix, and enhancement update Type/Severity Security Advisory: Important Topic An update for kernel is now available for Red Hat Enterprise Linux 74 Extended Update SupportRed Hat Product Security has rated this update as having a security impact of Important A Comm ...

Synopsis Important: kernel-rt security, bug fix, and enhancement update Type/Severity Security Advisory: Important Topic An update for kernel-rt is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Sco ...

Synopsis Important: kernel security, bug fix, and enhancement update Type/Severity Security Advisory: Important Topic An update for kernel is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring S ...

Several security issues were fixed in the Linux kernel ...

stack buffer overflow in the native Bluetooth stackA stack buffer overflow flaw was found in the way the Bluetooth subsystem of the Linux kernel processed pending L2CAP configuration responses from a client On systems with the stack protection feature enabled in the kernel (CONFIG_CC_STACKPROTECTOR=y, which is enabled on all architectures other th ...

A flaw was found in the implementation of associative arrays where the add_key systemcall and KEYCTL_UPDATE operations allowed for a NULL payload with a nonzero length When accessing the payload within this length parameters value, an unprivileged user could trivially cause a NULL pointer dereference (kernel oops) ...

CWE-476 https://patchwork.kernel.org/patch/9781573/https://github.com/torvalds/linux/commit/5649645d725c73df4302428ee4e02c869248b4c5 https://bugzilla.suse.com/show_bug.cgi?id=1045327 http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.11.5 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5649645d725c73df4302428ee4e02c869248b4c5 http://www.securityfocus.com/bid/101292 https://usn.ubuntu.com/3583-2/https://usn.ubuntu.com/3583-1/https://access.redhat.com/errata/RHSA-2019:1946 https://nvd.nist.gov https://access.redhat.com/errata/RHSA-2019:1946 https://usn.ubuntu.com/3583-2/

CVE-2017-15274

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect