Lucene search

MitreCVE-2017-16527

HistoryNov 04, 2017 - 1:29 a.m.

CVE-2017-16527

2017-11-0401:29:36

CWE-416

mitre

web.nvd.nist.gov

cve

linux kernel

vulnerability

usb device

denial of service

nvd

security

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

6.6

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

6.7

Confidence

High

EPSS

Percentile

5.1%

JSON

sound/usb/mixer.c in the Linux kernel before 4.13.8 allows local users to cause a denial of service (snd_usb_mixer_interrupt use-after-free and system crash) or possibly have unspecified other impact via a crafted USB device.

Affected configurations

Nvd

Node

linuxlinux_kernelRange<3.2.95

linuxlinux_kernelRange3.3–3.16.50

linuxlinux_kernelRange3.17–3.18.76

linuxlinux_kernelRange3.19–4.1.46

linuxlinux_kernelRange4.2–4.4.93

linuxlinux_kernelRange4.5–4.9.57

linuxlinux_kernelRange4.10–4.13.8

Node

canonicalubuntu_linuxMatch14.04esm

Node

debiandebian_linuxMatch7.0

VendorProductVersionCPE
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
canonicalubuntu_linux14.04cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*
debiandebian_linux7.0cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
linux	linux_kernel	*	cpe:2.3:o:linux:linux_kernel::::::::
canonical	ubuntu_linux	14.04	cpe:2.3:o:canonical:ubuntu_linux:14.04::::esm:::
debian	debian_linux	7.0	cpe:2.3:o:debian:debian_linux:7.0:::::::*