CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0CVE-2017-17855
https://notcve.org/view.php?id=CVE-2017-17855
kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging improper use of pointers in place of scalars. kernel/bpf/verifier.c en el kernel de Linux, en versiones anteriores a la 4.14.8, permite que los usuarios locales provoquen una denegación de servicio (corrupción de memoria) o, posiblemente, causen otros impactos no especificados aprovechando un uso incorrecto de punteros en lugar de escalares. • http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=179d1c5602997fef5a940c6ddcf31212cbfebd14 http://www.openwall.com/lists/oss-security/2017/12/21/2 https://github.com/torvalds/linux/commit/179d1c5602997fef5a940c6ddcf31212cbfebd14 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0CVE-2017-17854
https://notcve.org/view.php?id=CVE-2017-17854
kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service (integer overflow and memory corruption) or possibly have unspecified other impact by leveraging unrestricted integer values for pointer arithmetic. kernel/bpf/verifier.c en el kernel de Linux, en versiones anteriores a la 4.14.8, permite que los usuarios locales provoquen una denegación de servicio (desbordamiento de enteros y corrupción de memoria) o, posiblemente, causen otros impactos no especificados aprovechando valores de enteros sin restricción para aritmética de punteros. • http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=bb7f0f989ca7de1153bd128a40a71709e339fa03 http://www.openwall.com/lists/oss-security/2017/12/21/2 https://github.com/torvalds/linux/commit/bb7f0f989ca7de1153bd128a40a71709e339fa03 • CWE-190: Integer Overflow or Wraparound •
CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0CVE-2017-17852
https://notcve.org/view.php?id=CVE-2017-17852
kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging mishandling of 32-bit ALU ops. kernel/bpf/verifier.c en el kernel de Linux, en versiones anteriores a la 4.14.8, permite que los usuarios locales provoquen una denegación de servicio (corrupción de memoria) o, posiblemente, causen otros impactos no especificados aprovechando una mala gestión de las operaciones de la unidad aritmética lógica (ALU) de 32 bits. • http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=468f6eafa6c44cb2c5d8aad35e12f06c240a812a http://www.openwall.com/lists/oss-security/2017/12/21/2 https://github.com/torvalds/linux/commit/468f6eafa6c44cb2c5d8aad35e12f06c240a812a • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0CVE-2017-16996
https://notcve.org/view.php?id=CVE-2017-16996
kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging register truncation mishandling. kernel/bpf/verifier.c en el kernel de Linux, en versiones anteriores a la 4.14.8, permite que los usuarios locales provoquen una denegación de servicio (corrupción de memoria) o, posiblemente, causen otros impactos no especificados aprovechando una mala gestión del truncamiento de registros. • http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0c17d1d2c61936401f4702e1846e2c19b200f958 http://openwall.com/lists/oss-security/2017/12/21/2 http://www.securityfocus.com/bid/102267 https://bugs.chromium.org/p/project-zero/issues/detail?id=1454 https://github.com/torvalds/linux/commit/0c17d1d2c61936401f4702e1846e2c19b200f958 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.8EPSS: 0%CPEs: 5EXPL: 12CVE-2017-16995 – Linux - BPF Sign Extension Local Privilege Escalation
https://notcve.org/view.php?id=CVE-2017-16995
The check_alu_op function in kernel/bpf/verifier.c in the Linux kernel through 4.4 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging incorrect sign extension. La función check_alu_op en kernel/bpf/verifier.c en el kernel de Linux, hasta la versión 4.4, permite que los usuarios locales provoquen una denegación de servicio (corrupción de memoria) o, posiblemente, causen otros impactos no especificados aprovechando una extensión de señal incorrecta • https://www.exploit-db.com/exploits/45058 https://www.exploit-db.com/exploits/45010 https://www.exploit-db.com/exploits/44298 https://github.com/Al1ex/CVE-2017-16995 https://github.com/C0dak/CVE-2017-16995 https://github.com/gugronnier/CVE-2017-16995 https://github.com/ph4ntonn/CVE-2017-16995 https://github.com/anldori/CVE-2017-16995 https://github.com/vnik5287/CVE-2017-16995 https://github.com/fei9747/CVE-2017-16995 https://github.com/littlebin404/CVE-2017-16 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •