CVE-2017-8831

2017-05-0800:00:00

ubuntu.com

6.4 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

35.3%

JSON

The saa7164_bus_get function in drivers/media/pci/saa7164/saa7164-bus.c in
the Linux kernel through 4.11.5 allows local users to cause a denial of
service (out-of-bounds array access) or possibly have unspecified other
impact by changing a certain sequence-number value, aka a “double fetch”
vulnerability.

Bugs

<https://bugzilla.kernel.org/show_bug.cgi?id=195559>

Notes

Author	Note
tyhicks	Marking this issue as low since it requires relatively uncommon hardware

OSVersionArchitecturePackageVersionFilename
ubuntu14.04noarchlinux< 3.13.0-157.207UNKNOWN
ubuntu16.04noarchlinux< 4.4.0-96.119UNKNOWN
ubuntu16.04noarchlinux-aws< 4.4.0-1035.44UNKNOWN
ubuntu16.04noarchlinux-azure< 4.13.0-1005.7UNKNOWN
ubuntu16.04noarchlinux-gcp< 4.13.0-1002.5UNKNOWN
ubuntu16.04noarchlinux-gke< 4.4.0-1031.31UNKNOWN
ubuntu16.04noarchlinux-hwe< 4.13.0-26.29~16.04.2UNKNOWN
ubuntu16.04noarchlinux-hwe-edge< 4.13.0-26.29~16.04.2UNKNOWN
ubuntu16.04noarchlinux-kvm< 4.4.0-1007.12UNKNOWN
ubuntu14.04noarchlinux-lts-xenial< 4.4.0-96.119~14.04.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	14.04	noarch	linux	< 3.13.0-157.207	UNKNOWN
ubuntu	16.04	noarch	linux	< 4.4.0-96.119	UNKNOWN
ubuntu	16.04	noarch	linux-aws	< 4.4.0-1035.44	UNKNOWN
ubuntu	16.04	noarch	linux-azure	< 4.13.0-1005.7	UNKNOWN
ubuntu	16.04	noarch	linux-gcp	< 4.13.0-1002.5	UNKNOWN
ubuntu	16.04	noarch	linux-gke	< 4.4.0-1031.31	UNKNOWN
ubuntu	16.04	noarch	linux-hwe	< 4.13.0-26.29~16.04.2	UNKNOWN
ubuntu	16.04	noarch	linux-hwe-edge	< 4.13.0-26.29~16.04.2	UNKNOWN
ubuntu	16.04	noarch	linux-kvm	< 4.4.0-1007.12	UNKNOWN
ubuntu	14.04	noarch	linux-lts-xenial	< 4.4.0-96.119~14.04.1	UNKNOWN