CVE-2017-16996: Buffer Overflow
First published: Wed Dec 27 2017(Updated: )
kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging register truncation mishandling.
Credit: security@debian.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Linux Linux kernel | >=4.14<4.14.9 | |
| Debian Debian Linux | =9.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0c17d1d2c61936401f4702e1846e2c19b200f958
- http://openwall.com/lists/oss-security/2017/12/21/2
- http://www.securityfocus.com/bid/102267
- https://bugs.chromium.org/p/project-zero/issues/detail?id=1454
- https://github.com/torvalds/linux/commit/0c17d1d2c61936401f4702e1846e2c19b200f958
- collector/nvd-index
- vendor/linux
- canonical/linux linux kernel
- version/linux linux kernel/4.14
- vendor/debian
- canonical/debian debian linux
- version/debian debian linux/9.0