CVE-2017-16995

{"id": "CVE-2017-16995", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.2, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "published": "2017-12-27T17:08:17.670", "references": [{"url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=95a762e2c8c942780948091f8f2a4f32fce1ac6f", "tags": ["Vendor Advisory"], "source": "security@debian.org"}, {"url": "http://openwall.com/lists/oss-security/2017/12/21/2", "tags": ["Mailing List", "Third Party Advisory"], "source": "security@debian.org"}, {"url": "http://www.securityfocus.com/bid/102288", "tags": ["Third Party Advisory", "VDB Entry"], "source": "security@debian.org"}, {"url": "https://bugs.chromium.org/p/project-zero/issues/detail?id=1454", "tags": ["Third Party Advisory"], "source": "security@debian.org"}, {"url": "https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=a6132276ab5dcc38b3299082efeb25b948263adb", "tags": ["Vendor Advisory"], "source": "security@debian.org"}, {"url": "https://github.com/torvalds/linux/commit/95a762e2c8c942780948091f8f2a4f32fce1ac6f", "tags": ["Third Party Advisory"], "source": "security@debian.org"}, {"url": "https://usn.ubuntu.com/3619-1/", "tags": ["Third Party Advisory"], "source": "security@debian.org"}, {"url": "https://usn.ubuntu.com/3619-2/", "tags": ["Third Party Advisory"], "source": "security@debian.org"}, {"url": "https://usn.ubuntu.com/3633-1/", "tags": ["Third Party Advisory"], "source": "security@debian.org"}, {"url": "https://usn.ubuntu.com/usn/usn-3523-2/", "tags": ["Third Party Advisory"], "source": "security@debian.org"}, {"url": "https://www.debian.org/security/2017/dsa-4073", "tags": ["Third Party Advisory"], "source": "security@debian.org"}, {"url": "https://www.exploit-db.com/exploits/44298/", "tags": ["Third Party Advisory", "VDB Entry"], "source": "security@debian.org"}, {"url": "https://www.exploit-db.com/exploits/45010/", "tags": ["Third Party Advisory", "VDB Entry"], "source": "security@debian.org"}, {"url": "https://www.exploit-db.com/exploits/45058/", "tags": ["Third Party Advisory", "VDB Entry"], "source": "security@debian.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-119"}]}], "descriptions": [{"lang": "en", "value": "The check_alu_op function in kernel/bpf/verifier.c in the Linux kernel through 4.4 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging incorrect sign extension."}, {"lang": "es", "value": "La funci\u00f3n check_alu_op en kernel/bpf/verifier.c en el kernel de Linux, hasta la versi\u00f3n 4.4, permite que los usuarios locales provoquen una denegaci\u00f3n de servicio (corrupci\u00f3n de memoria) o, posiblemente, causen otros impactos no especificados aprovechando una extensi\u00f3n de se\u00f1al incorrecta"}], "lastModified": "2023-01-19T15:48:41.743", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8F90DFFB-7662-456E-B026-70B6266F2672", "versionEndExcluding": "4.9.72", "versionStartIncluding": "4.9"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "138E3219-AF76-4219-A5E1-8EF8548D50A6", "versionEndExcluding": "4.14.9", "versionStartIncluding": "4.10"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DEECE5FC-CACF-4496-A3E7-164736409252"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*", "vulnerable": true, "matchCriteriaId": "815D70A8-47D3-459C-A32C-9FEACA0659D1"}, {"criteria": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*", "vulnerable": true, "matchCriteriaId": "7A5301BF-1402-4BE0-A0F8-69FBE79BC6D6"}], "operator": "OR"}]}], "sourceIdentifier": "security@debian.org"}