Veracode Vulnerability DatabaseVERACODE:17863Privilege Escalation
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
linux kernel is vulnerable to privilege escalation. This vulnerability exists in sound timer code in the snd_timer_user_read() function in the sound/core/timer.c file in the Linux kernel. An unprivileged attacker can exploit the race condition to cause an out-of-bound access which may lead to a system crash.
References
lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html
access.redhat.com/errata/RHSA-2017:0113
access.redhat.com/security/cve/CVE-2017-13167
access.redhat.com/security/updates/classification/#important
access.redhat.com/security/vulnerabilities/2706661
bugzilla.redhat.com/show_bug.cgi?id=1346444
bugzilla.redhat.com/show_bug.cgi?id=1357997
bugzilla.redhat.com/show_bug.cgi?id=1378982
bugzilla.redhat.com/show_bug.cgi?id=1400193
bugzilla.redhat.com/show_bug.cgi?id=1400305
bugzilla.redhat.com/show_bug.cgi?id=1401779
source.android.com/security/bulletin/pixel/2017-12-01
Related
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C