5.1
Moyenne
CVE-2017-7558 A kernel data leak due to an out-of-bound read was found in the Linux kernel in inet_diag_msg_sctp{,l}addr_fill() and…
Description
A kernel data leak due to an out-of-bound read was found in the Linux kernel in inet_diag_msg_sctp{,l}addr_fill() and sctp_get_sctp_info() functions present since version 4.7-rc1 through version 4.13. A data leak happens when these functions fill in sockaddr data structures used to export socket's diagnostic information. As a result, up to 100 bytes of the slab data could be leaked to a userspace.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| kernel | Versions non publiées |
Références
- [linux-netdev] 20170823 [PATCH net] sctp: Avoid out-of-bounds reads from address storage marc.info
- RHSA-2017:2918 access.redhat.com
- RHSA-2017:2931 access.redhat.com
- 100466 www.securityfocus.com
- [oss-security] 20170823 CVE-2017-7558: Linux kernel: sctp: out-of-bounds read in inet_diag_msg_sctp{,l}addr_fill() and sctp_get_sctp_info() seclists.org
- bugzilla.redhat.com bugzilla.redhat.com
- 1039221 www.securitytracker.com
- DSA-3981 www.debian.org
- RHSA-2017:2930 access.redhat.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de kernel
Les 97 CVE de kernel →
CVE-2021-47482
In the Linux kernel, the following vulnerability has been resolved: net: batman-adv: fix error handling Syzbot…
5.3
Moyenne
CVE-2024-25743
In the Linux kernel through 6.9, an untrusted hypervisor can inject virtual interrupts 0 and 14 at any point in time and…
7.1
Élevée
CVE-2021-34981
Linux Kernel Bluetooth CMTP Module Double Free Privilege Escalation Vulnerability
7.5
Élevée
CVE-2023-52584
In the Linux kernel, the following vulnerability has been resolved: spmi: mediatek: Fix UAF on device remove The pmif…
3.8
Faible