CVE-2017-16913: Buffer Overflow
Last updated 29 November 2024
Other sources
The "stubrecvcmdsubmit()" function (drivers/usb/usbip/stubrx.c) in the Linux Kernel before version 4.14.8, 4.9.71, and 4.4.114 when handling CMDSUBMIT packets allows attackers to cause a denial of service (arbitrary memory allocation) via a specially crafted USB over IP packet.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1 - Upgrade
Upgrade
Linux Kernelto a version that resolves this vulnerability.Fixed in 4.14.8 - Upgrade
Upgrade
Linux Kernelto a version that resolves this vulnerability.Fixed in 4.9.71 - Upgrade
Upgrade
Linux Kernelto a version that resolves this vulnerability.Fixed in 4.4.114
Event History
Frequently Asked Questions
What is CVE-2017-16913?
CVE-2017-16913 is a vulnerability in the Linux Kernel that allows attackers to cause a denial of service (arbitrary memory allocation) through specially crafted USB over IP packets.
How does CVE-2017-16913 affect the Linux Kernel?
CVE-2017-16913 affects versions of the Linux Kernel before 4.14.8, 4.9.71, and 4.4.114.
How can CVE-2017-16913 be exploited?
CVE-2017-16913 can be exploited by sending specially crafted USB over IP packets to the vulnerable system.
What is the severity of CVE-2017-16913?
CVE-2017-16913 has a severity rating of high.
How can I fix CVE-2017-16913 in the Linux Kernel?
To fix CVE-2017-16913, update the Linux Kernel to version 4.14.8, 4.9.71, or 4.4.114 or later.