UBUNTU-CVE-2017-16529

The sndusbcreatestreams function in sound/usb/card.c in the Linux kernel before 4.13.6 allows local users to cause a denial of service out-of-bounds read and system crash or possibly have unspecified other impact via a crafted USB device...

CVE-2017-16530

The uas driver in the Linux kernel before 4.13.6 allows local users to cause a denial of service out-of-bounds read and system crash or possibly have unspecified other impact via a crafted USB device, related to drivers/usb/storage/uas-detect.h and drivers/usb/storage/uas.c...

CVE-2017-16537

The imonprobe function in drivers/media/rc/imon.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service NULL pointer dereference and system crash or possibly have unspecified other impact via a crafted USB device...

UBUNTU-CVE-2017-16525

The usbserialconsoledisconnect function in drivers/usb/serial/console.c in the Linux kernel before 4.13.8 allows local users to cause a denial of service use-after-free and system crash or possibly have unspecified other impact via a crafted USB device, related to disconnection and failed setup...

UBUNTU-CVE-2017-16526

drivers/uwb/uwbd.c in the Linux kernel before 4.13.6 allows local users to cause a denial of service general protection fault and system crash or possibly have unspecified other impact via a crafted USB device...

PT-2017-3147

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 4.13.11 Description The issue is related to a missing warm-start check and incorrect attach timing in the Linux kernel, specifically in the drivers/media/usb/dvb-usb-v2/lmedm04.c file. This can be exploited by a...

PT-2017-3307

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.13.11 Description The issue is related to the parse hid report descriptor function in the Linux kernel, which allows local users to cause a denial of service or possibly have other impacts via a crafted USB...

PT-2017-3305

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 4.13.11 Description The issue is related to the ims pcu get cdc union desc function in the Linux kernel, which allows local users to cause a denial of service or possibly have other unspecified impacts via a craft...

PT-2017-3148

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.13.11 Description The issue is related to the imon probe function in the Linux kernel, specifically in the drivers/media/rc/imon.c file. It is associated with pointer dereference errors. Exploitation of this...

PT-2017-3152 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.13.8 Description: The issue is related to the usbhid parse function in the Linux kernel, which allows local users to cause a denial of service, including out-of-bounds read and system crash, or possibly have...

SUSE-SU-2017:2697-1 Security update for libvirt

This update for libvirt fixes several issues. This security issue was fixed: - bsc1053600: Escape ssh commed line to prevent interpreting malicious hostname as arguments, allowing for command execution These non-security issues were fixed: - bsc1049505, bsc1051017: Security manager: Don't...

PT-2017-3156 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.13.6 Description: The issue is related to the snd usb create streams function in the Linux kernel, which allows local users to cause a denial of service, including out-of-bounds read and system crash, or...

PT-2017-3157 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.13.4 Description: The issue is related to a use-after-free error in the sound/core/seq device.c file of the Linux kernel. This can be exploited by local users via a crafted USB device, potentially leading to a...

Microsoft Windows automatically executes code specified in shortcut files

Overview Microsoft Windows automatically executes code specified in shortcut LNK files. Description Microsoft Windows supports the use of shortcut or LNK files. A LNK file is a reference to a local file. Clicking on a LNK or file has essentially the same outcome as clicking on the file that is...

EulerOS 2.0 SP1 : kernel (EulerOS-SA-2017-1122)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The regulatorenagpiofree function in drivers/regulator/core.c in the Linux kernel allows local users to gain privileges or cause a denial of...

June 27, 2017—KB4022723 (OS Build 14393.1378)

None None...

CVE-2017-8924

The edgebulkincallback function in drivers/usb/serial/ioti.c in the Linux kernel allows local users to obtain sensitive information in the dmesg ringbuffer and syslog from uninitialized kernel memory by using a crafted USB device posing as an ioti USB serial device to trigger an integer underflow...

Integer overflow

The edgebulkincallback function in drivers/usb/serial/ioti.c in the Linux kernel before 4.10.4 allows local users to obtain sensitive information in the dmesg ringbuffer and syslog from uninitialized kernel memory by using a crafted USB device posing as an ioti USB serial device to trigger an...

CVE-2017-8924

The edgebulkincallback function in drivers/usb/serial/ioti.c in the Linux kernel before 4.10.4 allows local users to obtain sensitive information in the dmesg ringbuffer and syslog from uninitialized kernel memory by using a crafted USB device posing as an ioti USB serial device to trigger an...

CVE-2017-8924

The edgebulkincallback function in drivers/usb/serial/ioti.c in the Linux kernel before 4.10.4 allows local users to obtain sensitive information in the dmesg ringbuffer and syslog from uninitialized kernel memory by using a crafted USB device posing as an ioti USB serial device to trigger an...