7

CVE-2017-7533

Race condition in the fsnotify implementation in the Linux kernel through 4.12.4 allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted application that leverages simultaneous execution of the inotify_handle_event and vfs_rename functions.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 3.14 < 3.16.47
Linux ≫ Linux Kernel Version >= 3.17 < 3.18.64
Linux ≫ Linux Kernel Version >= 3.19 < 4.4.80
Linux ≫ Linux Kernel Version >= 4.5 < 4.9.41
Linux ≫ Linux Kernel Version >= 4.10 < 4.12.5
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.22% 0.648
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7 1 5.9
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 6.9 3.4 10
AV:L/AC:M/Au:N/C:C/I:C/A:C
CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.

https://access.redhat.com/errata/RHSA-2017:2669
Third Party Advisory
https://source.android.com/security/bulletin/2017-12-01
Third Party Advisory
http://www.debian.org/security/2017/dsa-3927
Third Party Advisory
http://www.debian.org/security/2017/dsa-3945
Third Party Advisory
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=49d31c2f389acfe83417083e1208422b4091cd9e
Patch
Third Party Advisory
Issue Tracking
http://openwall.com/lists/oss-security/2017/08/03/2
Patch
Third Party Advisory
Mailing List
http://www.openwall.com/lists/oss-security/2019/06/27/7
Third Party Advisory
Mailing List
http://www.openwall.com/lists/oss-security/2019/06/28/1
Third Party Advisory
Mailing List
http://www.openwall.com/lists/oss-security/2019/06/28/2
Third Party Advisory
Mailing List
http://www.securityfocus.com/bid/100123
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1039075
Third Party Advisory
VDB Entry
https://access.redhat.com/errata/RHSA-2017:2473
Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:2585
Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:2770
Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:2869
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1468283
Patch
Third Party Advisory
Issue Tracking
https://github.com/torvalds/linux/commit/49d31c2f389acfe83417083e1208422b4091cd9e
Patch
Third Party Advisory
Issue Tracking
https://patchwork.kernel.org/patch/9755753/
Patch
Third Party Advisory
Issue Tracking
https://patchwork.kernel.org/patch/9755757/
Patch
Third Party Advisory
Issue Tracking
https://www.mail-archive.com/linux-kernel%40vger.kernel.org/msg1408967.html
Third Party Advisory