Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2017-17862
HistoryDec 27, 2017 - 12:00 a.m.

CVE-2017-17862

2017-12-2700:00:00
ubuntu.com
ubuntu.com
23

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

4.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

0.0004 Low

EPSS

Percentile

5.3%

JSON

kernel/bpf/verifier.c in the Linux kernel through 4.14.8 ignores
unreachable code, even though it would still be processed by JIT compilers.
This behavior, also considered an improper branch-pruning logic issue,
could possibly be used by local users for denial of service.

Bugs

Notes

Author Note
sbeattie incomplete fix resulted in bug 1763454
OSVersionArchitecturePackageVersionFilename
ubuntu17.10noarchlinux< 4.13.0-25.29UNKNOWN
ubuntu16.04noarchlinux< 4.4.0-119.143UNKNOWN
ubuntu14.04noarchlinux-aws< 4.4.0-1016.16UNKNOWN
ubuntu16.04noarchlinux-aws< 4.4.0-1054.63UNKNOWN
ubuntu16.04noarchlinux-azure< 4.13.0-1005.7UNKNOWN
ubuntu16.04noarchlinux-gcp< 4.13.0-1006.9UNKNOWN
ubuntu16.04noarchlinux-hwe< 4.13.0-26.29~16.04.2UNKNOWN
ubuntu18.04noarchlinux-hwe-edge< 4.18.0-8.9~18.04.1UNKNOWN
ubuntu16.04noarchlinux-hwe-edge< 4.13.0-26.29~16.04.2UNKNOWN
ubuntu16.04noarchlinux-kvm< 4.4.0-1020.25UNKNOWN
Rows per page:
1-10 of 161

Related

prion 1
debiancve 1
redhatcve 1
cve 1
openvas 32
photon 2
nessus 13
ubuntu 5
fedora 24
archlinux 4
suse 5
debian 1
osv 1
mageia 3
cloudfoundry 1
prion
prion
Design/Logic Flaw
2017-12-27 17:08:00
debiancve
debiancve
CVE-2017-17862
2017-12-27 17:08:00
redhatcve
redhatcve
CVE-2017-17862
2020-03-08 01:31:35
cve
cve
CVE-2017-17862
2017-12-27 17:08:00
openvas
openvas
Ubuntu Update for linux-raspi2 USN-3523-3
2018-01-11 00:00:00
Ubuntu Update for linux USN-3523-1
2018-01-10 00:00:00
Ubuntu Update for linux-azure USN-3523-2
2018-01-11 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2018-0107
2018-02-13 00:00:00
Critical Photon OS Security Update - PHSA-2018-0009
2018-01-04 00:00:00
nessus
nessus
Ubuntu 17.10 : linux-raspi2 vulnerabilities (USN-3523-3)
2018-01-11 00:00:00
Ubuntu 16.04 LTS : Linux kernel (HWE) vulnerabilities (USN-3523-2)
2018-01-11 00:00:00
Ubuntu 17.10 : linux vulnerabilities (USN-3523-1) (Meltdown)
2018-01-10 00:00:00
ubuntu
ubuntu
Linux kernel (Raspberry Pi 2) vulnerabilities
2018-01-10 00:00:00
Linux kernel (HWE) vulnerabilities
2018-01-10 00:00:00
Linux kernel vulnerabilities
2018-01-09 00:00:00
fedora
fedora
[SECURITY] Fedora 27 Update: kernel-4.14.11-300.fc27
2018-01-04 02:22:54
[SECURITY] Fedora 26 Update: kernel-4.14.11-200.fc26
2018-01-04 18:12:50
[SECURITY] Fedora 27 Update: kernel-4.15.17-300.fc27
2018-04-18 01:31:51
archlinux
archlinux
[ASA-201801-2] linux-lts: multiple issues
2018-01-05 00:00:00
[ASA-201801-1] linux: multiple issues
2018-01-05 00:00:00
[ASA-201801-3] linux-zen: multiple issues
2018-01-05 00:00:00
suse
suse
Security update for the Linux Kernel (important)
2018-02-07 18:08:53
Security update for the Linux Kernel (important)
2018-02-09 21:15:14
Security update for the Linux Kernel (important)
2018-02-09 15:09:34
debian
debian
[SECURITY] [DSA 4073-1] linux security update
2017-12-23 20:13:29
osv
osv
linux - security update
2017-12-23 00:00:00
mageia
mageia
kernel-linus update provides 4.14 series and fixes security vulnerabilities
2018-01-06 03:53:31
kernel-tmb update provides 4.14 series and fixes security vulnerabilities
2018-01-06 03:53:31
kernel update provides 4.14 series and fixes security vulnerabilities
2018-01-06 03:53:31
cloudfoundry
cloudfoundry
USN-3619-2: Linux kernel (Xenial HWE) vulnerabilities | Cloud Foundry
2018-05-02 00:00:00

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

4.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

0.0004 Low

EPSS

Percentile

5.3%

JSON
Related for UB:CVE-2017-17862
prion1debiancve1redhatcve1cve1openvas32photon2nessus13ubuntu5fedora24archlinux4suse5debian1osv1mageia3cloudfoundry1