CVE-2017-5123: Input Validation
Published Nov 2, 2021
·Updated
Insufficient data validation in waitid allowed an user to escape sandboxes on Linux.
Affected Software
16 affected components
Linux Linux kernel>=4.13<4.13.7
NetApp Cloud Backup
NetApp H300s Firmware
NetApp H300s
NetApp H500s Firmware
NetApp H500s
NetApp H700s Firmware
NetApp H700s
NetApp H300e Firmware
NetApp H300e
NetApp H500e Firmware
NetApp H500e
NetApp H700e Firmware
NetApp H700e
NetApp H410s Firmware
NetApp H410s
Remediation
Event History
Nov 2, 2021
CVE Published
via MITRE·10:05 PM
Data Sourced
via MITRE·10:05 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID of this vulnerability?
The vulnerability ID is CVE-2017-5123.
2
What is the severity of CVE-2017-5123?
The severity of CVE-2017-5123 is high.
3
Which software is affected by CVE-2017-5123?
Linux kernel, Netapp Cloud Backup, Apple macOS Ventura, Apple macOS Big Sur, Apple macOS Monterey, Netapp H300e Firmware, Netapp H500e Firmware, Netapp H700e Firmware.
4
How can an attacker exploit CVE-2017-5123?
An attacker can exploit CVE-2017-5123 by using insufficient data validation in waitid to escape sandboxes on Linux.
5
Are there any references for CVE-2017-5123?
Yes, there are references available for CVE-2017-5123. You can find them [here](https://crbug.com/772848), [here](https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=96ca579a1ecc943b75beba58bebb0356f6cc4b51), and [here](https://security.netapp.com/advisory/ntap-20211223-0003/).