The vulnerability of Linux operating system SCSI kernel drivers, related to the improper assignment of permissions to critical resources, allows attackers to access confidential data, compromise its integrity, and cause service failures.

🗓️ 21 Mar 2021 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

Linux storage kernel driver vulnerability enables privilege escalation, exposing data, breaking integrity, and causing service failures.

Reporter	Title	Published	Views	Family All 76
IBM Security Bulletins	Security Bulletin: IBM API Connect has addressed multiple vulnerabilities in Developer Portal's dependencies - Cumulative list from June 28, 2018 to December 13, 2018	28 Jan 201917:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM API Connect is affected by multiple third-party vulnerabilities (Node.js, nghttp2, Linux, Intel CPU, Android)	31 Oct 201820:10	–	ibm
Android Security Bulletins	Pixel&hairsp;/&hairsp;Nexus Security Bulletin—December 2017Stay organized with collectionsSave and categorize content based on your preferences.	4 Dec 201700:00	–	androidsecurity
Cloud Foundry	USN-3820-2: Linux kernel (HWE) vulnerabilities \| Cloud Foundry	20 Nov 201800:00	–	cloudfoundry
Cloud Foundry	USN-3753-2: Linux kernel (Xenial HWE) vulnerabilities \| Cloud Foundry	11 Sep 201800:00	–	cloudfoundry
CNVD	Google Android Kernel SCSI Driver Elevation of Privilege Vulnerability	6 Dec 201700:00	–	cnvd
CVE	CVE-2017-13168	6 Dec 201714:00	–	cve
Cvelist	CVE-2017-13168	6 Dec 201714:00	–	cvelist
Debian CVE	CVE-2017-13168	6 Dec 201714:00	–	debiancve
Oracle linux	Unbreakable Enterprise kernel security update	6 Nov 201800:00	–	oraclelinux

Vulners

Node

canonical ubuntuMatch12.04

Source	Link
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
github	www.github.com/LineageOS/android_kernel_xiaomi_msm8996/commit/4e624aeb719ba0a13390f70b18f2388372614b94
kernel	www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.55
kernel	www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.17.6
kernel	www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.140
kernel	www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.112
nvd	www.nvd.nist.gov/vuln/detail/CVE-2017-13168
security-tracker	www.security-tracker.debian.org/tracker/CVE-2017-13168
source	www.source.android.com/security/bulletin/pixel/2017-12-01

04 Jun 2024 00:00Current

7.1High risk

Vulners AI Score7.1

CVSS 26.8

CVSS 37.8

EPSS0.00388

linux storage driver privilege escalation data exposure integrity impact service disruption