Published: 04/11/2017 Updated: 14/03/2024

CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9

CVSS v3 Base Score: 6.6 | Impact Score: 5.9 | Exploitability Score: 0.7

VMScore: 641

Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

The snd_usb_create_streams function in sound/usb/card.c in the Linux kernel prior to 4.13.6 allows local users to cause a denial of service (out-of-bounds read and system crash) or possibly have unspecified other impact via a crafted USB device.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel
canonical ubuntu linux 14.04
debian debian linux 7.0

Several security issues were fixed in the Linux kernel ...

The snd_usb_create_streams function in sound/usb/cardc in the Linux kernel before 4136 allows local users to cause a denial of service (out-of-bounds read and system crash) or possibly have unspecified other impact via a crafted USB device ...

CWE-125 https://groups.google.com/d/msg/syzkaller/rDzv5RP_f2M/M5au06qmAwAJ https://github.com/torvalds/linux/commit/bfc81a8bc18e3c4ba0cbaa7666ff76be2f998991 https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html http://www.securityfocus.com/bid/103284 https://usn.ubuntu.com/3754-1/https://nvd.nist.gov https://usn.ubuntu.com/3485-1/

CVE-2017-16529

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect