CVE-2017-7895

kernel: NFSv3 server does not properly handle payload bounds checking of WRITE requests

The NFSv2 and NFSv3 server implementations in the Linux kernel through 4.10.13 lack certain checks for the end of a buffer, which allows remote attackers to trigger pointer-arithmetic errors or possibly have unspecified other impact via crafted requests, related to fs/nfsd/nfs3xdr.c and fs/nfsd/nfsxdr.c.

CVSS 3.1 · 9.8 Critical EPSS 10.8% KEV · Not listed

Vendors

Debian Linux Redhat

Products

Debian Linux Linux Kernel Enterprise Linux and 7 more

CVE-2017-8064

kernel: dvb_usb_core.c interacts incorrectly with the CONFIG_VMAP_STACK option

drivers/media/usb/dvb-usb-v2/dvb_usb_core.c in the Linux kernel 4.9.x and 4.10.x before 4.10.12 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a DMA scatterlist.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Debian Linux

Products

Debian Linux Linux Kernel

CVE-2017-8831

kernel: Double fetch vulnerability in saa7164_bus_get function

The saa7164_bus_get function in drivers/media/pci/saa7164/saa7164-bus.c in the Linux kernel through 4.11.5 allows local users to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact by changing a certain sequence-number value, aka a "double fetch" vulnerability.

CVSS 3.1 · 6.4 Medium EPSS < 1% KEV · Not listed

Vendors

Canonical Debian Linux

Products

Ubuntu Linux Debian Linux Linux Kernel

CVE-2017-8890

kernel: Double free in the inet_csk_clone_lock function in net/ipv4/inet_connection_sock.c

The inet_csk_clone_lock function in net/ipv4/inet_connection_sock.c in the Linux kernel through 4.10.15 allows attackers to cause a denial of service (double free) or possibly have unspecified other impact by leveraging use of the accept system call.

CVSS 3.1 · 7.8 High EPSS 1.4% KEV · Not listed

Vendors

Debian Linux Redhat

Products

Debian Linux Linux Kernel Enterprise Linux and 2 more

CVE-2017-8924

kernel: Information leak in completion handler in edge_bulk_in_callback function

The edge_bulk_in_callback function in drivers/usb/serial/io_ti.c in the Linux kernel before 4.10.4 allows local users to obtain sensitive information (in the dmesg ringbuffer and syslog) from uninitialized kernel memory by using a crafted USB device (posing as an io_ti USB serial device) to trigger an integer underflow.

CVSS 3.0 · 4.6 Medium EPSS < 1% KEV · Not listed

Vendors

Debian Linux

Products

Debian Linux Linux Kernel

CVE-2017-8925

kernel: Reference count mishandling in the omninet_open function

The omninet_open function in drivers/usb/serial/omninet.c in the Linux kernel before 4.10.4 allows local users to cause a denial of service (tty exhaustion) by leveraging reference count mishandling.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Debian Linux

Products

Debian Linux Linux Kernel

CVE-2017-9075

kernel: net: sctp_v6_create_accept_sk function mishandles inheritance

The sctp_v6_create_accept_sk function in net/sctp/ipv6.c in the Linux kernel through 4.11.1 mishandles inheritance, which allows local users to cause a denial of service or possibly have unspecified other impact via crafted system calls, a related issue to CVE-2017-8890.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Debian Linux Redhat

Products

Debian Linux Linux Kernel Enterprise Linux and 2 more

CVE-2017-9076

kernel: net: IPv6 DCCP implementation mishandles inheritance

The dccp_v6_request_recv_sock function in net/dccp/ipv6.c in the Linux kernel through 4.11.1 mishandles inheritance, which allows local users to cause a denial of service or possibly have unspecified other impact via crafted system calls, a related issue to CVE-2017-8890.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Debian Linux Redhat

Products

Debian Linux Linux Kernel Enterprise Linux and 2 more

CVE-2015-5219

ntp: infinite loop in sntp processing crafted packet

The ULOGTOD function in ntp.d in SNTP before 4.2.7p366 does not properly perform type conversions from a precision value to a double, which allows remote attackers to cause a denial of service (infinite loop) via a crafted NTP packet.

CVSS 3.1 · 7.5 High EPSS 6.1% KEV · Not listed

Vendors

Canonical Debian Fedoraproject and 7 more

Products

Ubuntu Linux Debian Linux Fedora and 18 more

CVE-2017-13088

wpa_supplicant: reinstallation of the integrity group key (IGTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame

Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity Group Temporal Key (IGTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame, allowing an attacker within radio range to replay frames from access points to clients.

CVSS 3.0 · 5.3 Medium EPSS 1.8% KEV · Not listed

Vendors

Canonical Debian Freebsd and 4 more

Products

Ubuntu Linux Debian Linux Freebsd and 10 more

CVE-2017-14491

dnsmasq: heap overflow in the code responsible for building DNS replies

Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response.

CVSS 3.1 · 9.8 Critical EPSS 86.5% KEV · Not listed

Vendors

Arista Arubanetworks Canonical and 10 more

Products

Eos Arubaos Ubuntu Linux and 32 more

CVE-2017-14497

kernel: buffer overflow in tpacket_rcv() in net/packet/af_packet.c

The tpacket_rcv function in net/packet/af_packet.c in the Linux kernel before 4.13 mishandles vnet headers, which might allow local users to cause a denial of service (buffer overflow, and disk and memory corruption) or possibly have unspecified other impact via crafted system calls.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Debian Linux

Products

Debian Linux Linux Kernel

CVE-2017-15115

kernel: use-after-free in sctp_cmp_addr_exact

The sctp_do_peeloff function in net/sctp/socket.c in the Linux kernel before 4.14 does not check whether the intended netns is used in a peel-off action, which allows local users to cause a denial of service (use-after-free and system crash) or possibly have unspecified other impact via crafted system calls.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Canonical Debian Linux and 1 more

Products

Ubuntu Linux Debian Linux Linux Kernel and 1 more

CVE-2017-15868

kernel: bnep_add_connection does not check if l2cap socket is available allowing privilege escalation

The bnep_add_connection function in net/bluetooth/bnep/core.c in the Linux kernel before 3.19 does not ensure that an l2cap socket is available, which allows local users to gain privileges via a crafted application.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Canonical Debian Linux

Products

Ubuntu Linux Debian Linux Linux Kernel

CVE-2017-16525

kernel: Use-after-free in usb_serial_console_disconnect()

The usb_serial_console_disconnect function in drivers/usb/serial/console.c in the Linux kernel before 4.13.8 allows local users to cause a denial of service (use-after-free and system crash) or possibly have unspecified other impact via a crafted USB device, related to disconnection and failed setup.

CVSS 3.1 · 6.6 Medium EPSS < 1% KEV · Not listed

Vendors

Canonical Debian Linux

Products

Ubuntu Linux Debian Linux Linux Kernel

CVE-2017-16526

kernel: General protection fault in drivers/uwb/uwbd.c

drivers/uwb/uwbd.c in the Linux kernel before 4.13.6 allows local users to cause a denial of service (general protection fault and system crash) or possibly have unspecified other impact via a crafted USB device.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Canonical Debian Linux

Products

Ubuntu Linux Debian Linux Linux Kernel

CVE-2017-16527

kernel: Use-after-free in snd_usb_mixer_interrupt

sound/usb/mixer.c in the Linux kernel before 4.13.8 allows local users to cause a denial of service (snd_usb_mixer_interrupt use-after-free and system crash) or possibly have unspecified other impact via a crafted USB device.

CVSS 3.1 · 6.6 Medium EPSS < 1% KEV · Not listed

Vendors

Canonical Debian Linux

Products

Ubuntu Linux Debian Linux Linux Kernel

CVE-2017-16529

kernel: out-of-bounds read in snd_usb_create_streams

The snd_usb_create_streams function in sound/usb/card.c in the Linux kernel before 4.13.6 allows local users to cause a denial of service (out-of-bounds read and system crash) or possibly have unspecified other impact via a crafted USB device.

CVSS 3.1 · 6.6 Medium EPSS < 1% KEV · Not listed

Vendors

Canonical Debian Linux

Products

Ubuntu Linux Debian Linux Linux Kernel

CVE-2017-16532

kernel: Null pointer dereference in get_endpoints function in drivers/usb/misc/usbtest.c

The get_endpoints function in drivers/usb/misc/usbtest.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted USB device.

CVSS 3.1 · 6.6 Medium EPSS < 1% KEV · Not listed

Vendors

Canonical Debian Linux

Products

Ubuntu Linux Debian Linux Linux Kernel

CVE-2017-16533

kernel: out-of-bounds read in usbhid_parse function in drivers/hid/usbhid/hid-core.c

The usbhid_parse function in drivers/hid/usbhid/hid-core.c in the Linux kernel before 4.13.8 allows local users to cause a denial of service (out-of-bounds read and system crash) or possibly have unspecified other impact via a crafted USB device.

CVSS 3.1 · 6.6 Medium EPSS < 1% KEV · Not listed

Vendors

Canonical Debian Linux

Products

Ubuntu Linux Debian Linux Linux Kernel