Lucene search
K

CVE-2017-7184

🗓️ 19 Mar 2017 18:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 257 Views🌐 WEB

The xfrm_replay_verify_len function in Linux kernel allows local users to obtain root privileges or cause denial of service

Related
Detection
Refs
Paths
NVD
Node
linuxlinux_kernelRange<3.2.89
OR
linuxlinux_kernelRange3.33.10.106
OR
linuxlinux_kernelRange3.113.12.73
OR
linuxlinux_kernelRange3.133.16.44
OR
linuxlinux_kernelRange3.173.18.49
OR
linuxlinux_kernelRange3.194.1.49
OR
linuxlinux_kernelRange4.24.4.59
OR
linuxlinux_kernelRange4.54.9.20
OR
linuxlinux_kernelRange4.104.10.8
ParameterPositionPathDescriptionCWE
replay_windowpathgit.kernel.org/linus/677e806da4d916052585301785d847c3b3b3e6186aOut-of-bounds reads/writes due to unvalidated user-specified replay_window in xfrm_replay_verify_len used by XFRM; potential local privilege escalation with CAP_NET_ADMIN.CWE-125CWE-787
xfrm_replay_verify_lenpathgit.kernel.org/linus/677e806da4d916052585301785d847c3b3b3e6186aOut-of-bounds reads/writes due to unvalidated user-specified replay_window in xfrm_replay_verify_len used by XFRM; potential local privilege escalation with CAP_NET_ADMIN.CWE-125CWE-787
xfrm_new_aepathgit.kernel.org/linus/677e806da4d916052585301785d847c3b3b3e6186aOut-of-bounds reads/writes due to unvalidated user-specified replay_window in xfrm_replay_verify_len used by XFRM; potential local privilege escalation with CAP_NET_ADMIN.CWE-125CWE-787
replay_windowpathgit.kernel.org/linus/f843ee6dd019bcece3e74e76ad9df0155655d0dfFixes for out-of-bounds access in xfrm_replay_verify_len related to XFRM_MSG_NEWAE update and user namespaces.CWE-125CWE-787
xfrm_replay_verify_lenpathgit.kernel.org/linus/f843ee6dd019bcece3e74e76ad9df0155655d0dfFixes for out-of-bounds access in xfrm_replay_verify_len related to XFRM_MSG_NEWAE update and user namespaces.CWE-125CWE-787
XFRM_MSG_NEWAEpathgit.kernel.org/linus/f843ee6dd019bcece3e74e76ad9df0155655d0dfFixes for out-of-bounds access in xfrm_replay_verify_len related to XFRM_MSG_NEWAE update and user namespaces.CWE-125CWE-787

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation