CVE-2017-12153: falha em kernel since v3.1-rc1 through v4.13
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 0.5%
A security flaw was discovered in the nl80211_set_rekey_data() function in net/wireless/nl80211.c in the Linux kernel through 4.13.3. This function does not check whether the required attributes are present in a Netlink request. This request can be issued by a user with the CAP_NET_ADMIN capability and may result in a NULL pointer dereference and system crash.
Produtos afetados
n/a · kernel since v3.1-rc1 through v4.13Referências
https://bugzilla.novell.com/show_bug.cgi?id=1058410https://bugzilla.redhat.com/show_bug.cgi?id=1491046http://seclists.org/oss-sec/2017/q3/437https://git.kernel.org/pub/scm/linux/kernel/git/jberg/mac80211.git/commit/?id=e785fa0a164aa11001cba931367c7f94ffaff888https://marc.info/?t=150525503100001&r=1&w=2https://usn.ubuntu.com/3583-1/https://usn.ubuntu.com/3583-2/http://www.debian.org/security/2017/dsa-3981http://www.securityfocus.com/bid/100855