The get_endpoints function in drivers/usb/misc/usbtest.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted USB device.
References
Link | Resource |
---|---|
https://github.com/torvalds/linux/commit/7c80f9e4a588f1925b07134bb2e3689335f6c6d8 | Patch Third Party Advisory |
https://groups.google.com/d/msg/syzkaller/l3870gs3LhA/y79DYQdFBAAJ | Third Party Advisory |
https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html | Mailing List Third Party Advisory |
https://usn.ubuntu.com/3617-1/ | Third Party Advisory |
https://usn.ubuntu.com/3617-2/ | Third Party Advisory |
https://usn.ubuntu.com/3617-3/ | Third Party Advisory |
https://usn.ubuntu.com/3619-1/ | Third Party Advisory |
https://usn.ubuntu.com/3619-2/ | Third Party Advisory |
https://usn.ubuntu.com/3754-1/ | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
History
14 Mar 2024, 19:57
Type | Values Removed | Values Added |
---|---|---|
First Time |
Canonical ubuntu Linux
Debian debian Linux Debian Canonical |
|
References | () https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html - Mailing List, Third Party Advisory | |
References | () https://usn.ubuntu.com/3617-1/ - Third Party Advisory | |
References | () https://usn.ubuntu.com/3617-2/ - Third Party Advisory | |
References | () https://usn.ubuntu.com/3617-3/ - Third Party Advisory | |
References | () https://usn.ubuntu.com/3619-1/ - Third Party Advisory | |
References | () https://usn.ubuntu.com/3619-2/ - Third Party Advisory | |
References | () https://usn.ubuntu.com/3754-1/ - Third Party Advisory | |
CPE | cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:* cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:* cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:* |
Information
Published : 2017-11-04 01:29
Updated : 2024-07-17 15:30
NVD link : CVE-2017-16532
Mitre link : CVE-2017-16532
CVE.ORG link : CVE-2017-16532
JSON object : View
Products Affected
canonical
- ubuntu_linux
debian
- debian_linux
linux
- linux_kernel
CWE
CWE-476
NULL Pointer Dereference