7.1
High
CVE-2017-7482 In the Linux kernel before version 4.12, Kerberos 5 tickets decoded when using the RXRPC keys incorrectly assumes the…
Description
In the Linux kernel before version 4.12, Kerberos 5 tickets decoded when using the RXRPC keys incorrectly assumes the size of a field. This could lead to the size-remaining variable wrapping and the data pointer going over the end of the buffer. This could possibly lead to memory corruption and possible privilege escalation.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Kernel: | 4.12 | No fix stated |
Other CVEs of Kernel:
The 6 CVEs of Kernel: →
CVE-2018-16884
A flaw was found in the Linux kernel's NFS41+ subsystem
6.5
Medium
CVE-2018-14646
The Linux kernel before 4.15-rc8 was found to be vulnerable to a NULL pointer dereference bug in the…
5.5
Medium
CVE-2018-16862
A security flaw was found in the Linux kernel in a way that the cleancache subsystem clears an inode after the final…
5.3
Medium
CVE-2017-7518
A flaw was found in the Linux kernel before version 4.12 in the way the KVM module processed the trap flag(TF) bit in…
5.5
Medium