CVE-2017-12762: Buffer Overflow
In /drivers/isdn/i4l/isdnnet.c: A user-controlled buffer is copied into a local buffer of constant size using strcpy without a length check which can cause a buffer overflow. This affects the Linux kernel 4.9-stable tree, 4.12-stable tree, 3.18-stable tree, and 4.4-stable tree.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.187-1Fixed in 6.12.94-1Fixed in 6.12.107-1Fixed in 7.1.12-1Fixed in 7.1.13-1 - Compensating control
Apply the fixes for the Linux kernel stable trees mentioned (4.9-stable, 4.12-stable, 3.18-stable, and 4.4-stable) addressing the strcpy buffer overflow in /drivers/isdn/i4l/isdn_net.c (copying a user-controlled buffer into a local constant-size buffer without a length check).
Event History
Frequently Asked Questions
What is CVE-2017-12762?
CVE-2017-12762 is a vulnerability in the Linux kernel that allows for buffer overflow by copying a user-controlled buffer into a local buffer of constant size without a length check.
Which software versions are affected by CVE-2017-12762?
CVE-2017-12762 affects the Linux kernel 4.9-stable, 4.12-stable, 3.18-stable, and 4.4-stable versions.
How severe is CVE-2017-12762?
CVE-2017-12762 is a vulnerability that can lead to a buffer overflow, which can be exploited by an attacker to execute arbitrary code or crash the system.
Is there a fix for CVE-2017-12762?
Yes, there are fixes available for CVE-2017-12762. Users should update their Linux kernel to a version that includes the fix.
Where can I find more information about CVE-2017-12762?
You can find more information about CVE-2017-12762 at the following references: [Patchwork](https://patchwork.kernel.org/patch/9880041/), [SecurityFocus](http://www.securityfocus.com/bid/100251), [Ubuntu Security Notice](https://usn.ubuntu.com/3620-1/)