Published: 30/07/2018 Updated: 14/02/2023

CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9

CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8

VMScore: 641

Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

In the Linux kernel before version 4.12, Kerberos 5 tickets decoded when using the RXRPC keys incorrectly assumes the size of a field. This could lead to the size-remaining variable wrapping and the data pointer going over the end of the buffer. This could possibly lead to memory corruption and possible privilege escalation.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel
debian debian linux 8.0
debian debian linux 9.0
redhat enterprise mrg 2.0

Synopsis Important: kernel-rt security and bug fix update Type/Severity Security Advisory: Important Topic An update for kernel-rt is now available for Red Hat Enterprise MRG 2Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CVS ...

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks CVE-2014-9940 A use-after-free flaw in the voltage and current regulator driver could allow a local user to cause a denial of service or potentially escalate privileges CVE-2017-7346 Li ...

Keberos 5 tickets being decoded when using the RXRPC keys incorrectly assumes the size of a field This could lead to the size-remaining variable wrapping and the data pointer going over the end of the buffer This could possibly lead to memory corruption and possible privilege escalation ...

Several security issues were fixed in the Linux kernel ...

USN-3378-1 introduced a regression in the Linux kernel ...

Several security issues were fixed in the Linux kernel ...

USN-3378-2 introduced a regression the Linux Hardware Enablement kernel ...

Several security issues were fixed in the Linux kernel ...

CWE-190 https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=5f2f97656ada8d811d3c1bef503ced266fcd53a0 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7482 http://seclists.org/oss-sec/2017/q2/602 https://www.debian.org/security/2017/dsa-3945 https://www.debian.org/security/2017/dsa-3927 http://www.securitytracker.com/id/1038787 http://www.securityfocus.com/bid/99299 https://access.redhat.com/errata/RHSA-2019:0641 https://access.redhat.com/errata/RHSA-2019:0641 https://nvd.nist.gov https://usn.ubuntu.com/3381-1/https://www.debian.org/security/./dsa-3945 https://access.redhat.com/security/cve/cve-2017-7482

CVE-2017-7482

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect