Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2017-5548
HistoryFeb 06, 2017 - 6:59 a.m.

CVE-2017-5548

2017-02-0606:59:00
CWE-119
mitre
web.nvd.nist.gov
32
4
linux kernel
cve-2017-5548
denial of service
memory corruption
nvd
config_vmap_stack
dma scatterlist

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.6

Confidence

High

EPSS

0

Percentile

5.1%

JSON

drivers/net/ieee802154/atusb.c in the Linux kernel 4.9.x before 4.9.6 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a DMA scatterlist.

Affected configurations

Nvd
Node
linuxlinux_kernelMatch4.9
OR
linuxlinux_kernelMatch4.9.1
OR
linuxlinux_kernelMatch4.9.2
OR
linuxlinux_kernelMatch4.9.3
OR
linuxlinux_kernelMatch4.9.4
OR
linuxlinux_kernelMatch4.9.5
VendorProductVersionCPE
linuxlinux_kernel4.9cpe:2.3:o:linux:linux_kernel:4.9:*:*:*:*:*:*:*
linuxlinux_kernel4.9.1cpe:2.3:o:linux:linux_kernel:4.9.1:*:*:*:*:*:*:*
linuxlinux_kernel4.9.2cpe:2.3:o:linux:linux_kernel:4.9.2:*:*:*:*:*:*:*
linuxlinux_kernel4.9.3cpe:2.3:o:linux:linux_kernel:4.9.3:*:*:*:*:*:*:*
linuxlinux_kernel4.9.4cpe:2.3:o:linux:linux_kernel:4.9.4:*:*:*:*:*:*:*
linuxlinux_kernel4.9.5cpe:2.3:o:linux:linux_kernel:4.9.5:*:*:*:*:*:*:*

Social References

More

Related

ubuntucve 1
cvelist 1
redhatcve 1
nvd 1
debiancve 1
prion 1
nessus 2
fedora 2
openvas 5
mageia 3
ubuntucve
ubuntucve
CVE-2017-5548
2017-02-06 00:00:00
cvelist
cvelist
CVE-2017-5548
2017-02-06 06:04:00
redhatcve
redhatcve
CVE-2017-5548
2017-01-24 15:47:54
nvd
nvd
CVE-2017-5548
2017-02-06 06:59:00
debiancve
debiancve
CVE-2017-5548
2017-02-06 06:59:00
prion
prion
Memory corruption
2017-02-06 06:59:00
nessus
nessus
Fedora 24 : kernel (2017-6cc158c193)
2017-01-31 00:00:00
Fedora 25 : kernel (2017-81fbd592d4)
2017-01-31 00:00:00
fedora
fedora
[SECURITY] Fedora 24 Update: kernel-4.9.6-100.fc24
2017-01-30 22:19:10
[SECURITY] Fedora 25 Update: kernel-4.9.6-200.fc25
2017-01-30 21:51:49
openvas
openvas
Fedora Update for kernel FEDORA-2017-81fbd592d4
2017-02-03 00:00:00
Fedora Update for kernel FEDORA-2017-6cc158c193
2017-02-03 00:00:00
Mageia: Security Advisory (MGASA-2017-0064)
2022-01-28 00:00:00
mageia
mageia
Updated kernel and kmod packages fixes security vulnerabilities
2017-02-25 11:29:30
Updated kernel-linus fixes security vulnerabilities
2017-02-25 11:29:30
Updated kernel-tmb packages fixes security vulnerabilities
2017-02-25 11:29:30

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.6

Confidence

High

EPSS

0

Percentile

5.1%

JSON
Related for CVE-2017-5548
ubuntucve1cvelist1redhatcve1nvd1debiancve1prion1nessus2fedora2openvas5mageia3