DeutschShown in its original language — a full translation is planned for a future version.
Linux Kernel: Mehrere Schwachstellen
view advisory published 2017-08-10
Ein lokaler Angreifer kann mehrere Schwachstellen in Linux Kernel ausnutzen, um beliebigen Programmcode mit Administratorrechten oder den Privilegien des angegriffenen Dienstes auszuführen oder einen Denial of Service Zustand herbeizuführen.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2017-1000112US | high7.0 | Exploit | ||
Linux kernel: Exploitable memory corruption due to UFO to non-UFO path switch. When building a UFO packet with MSG_MORE __ip_append_data() calls ip_ufo_append_data() to append. How… | ||||
| CVE-2017-1000111US | high7.8 | — | ||
Linux kernel: heap out-of-bounds in AF_PACKET sockets. This new issue is analogous to previously disclosed CVE-2016-8655. In both cases, a socket option that changes socket state m… | ||||
02
references
External citations — patches, advisories, analysis.
- CentOS Security Advisory CESA-2017:2930 vom 2017-10-23external
- Oracle Linux Security Advisory ELSA-2017-2930 vom 2017-10-20external
- Oracle Linux Security Advisory ELSA-2017-3200 vom 2017-11-16external
- Oracle Linux Security Advisory ELSA-2017-3631 vom 2017-10-25external
- Oracle Linux Security Advisory ELSA-2017-3632 vom 2017-10-25external
- Oracle Linux Security Advisory ELSA-2017-3633 vom 2017-10-25external
- Oracle Linux Security Advisory ELSA-2017-3635 vom 2017-11-02external
- Oracle Linux Security Advisory ELSA-2017-3658 vom 2017-12-08external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan