7.8
CVE-2017-7541
- EPSS 0.55%
- Veröffentlicht 25.07.2017 04:29:00
- Zuletzt bearbeitet 13.05.2026 00:24:29
- Quelle secalert@redhat.com
- CVE-Watchlists
- Unerledigt
The brcmf_cfg80211_mgmt_tx function in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c in the Linux kernel before 4.12.3 allows local users to cause a denial of service (buffer overflow and system crash) or possibly gain privileges via a crafted NL80211_CMD_FRAME Netlink packet.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 3.9 < 3.10.108
Linux ≫ Linux Kernel Version >= 3.11 < 3.16.48
Linux ≫ Linux Kernel Version >= 3.17 < 3.18.62
Linux ≫ Linux Kernel Version >= 3.19 < 4.1.43
Linux ≫ Linux Kernel Version >= 4.2 < 4.4.78
Linux ≫ Linux Kernel Version >= 4.5 < 4.9.39
Linux ≫ Linux Kernel Version >= 4.10 < 4.11.12
Linux ≫ Linux Kernel Version >= 4.12 < 4.12.3
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.55% | 0.414 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.8 | 1.8 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 7.2 | 3.9 | 10 |
AV:L/AC:L/Au:N/C:C/I:C/A:C
|
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.
https://access.redhat.com/errata/RHSA-2017:2930
https://access.redhat.com/errata/RHSA-2017:2931
https://access.redhat.com/errata/RHSA-2017:2918
http://www.debian.org/security/2017/dsa-3927
http://www.debian.org/security/2017/dsa-3945
https://source.android.com/security/bulletin/2017-11-01
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8f44c9a41386729fea410e688959ddaa9d51be7c
http://openwall.com/lists/oss-security/2017/07/24/2
http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.12.3
http://www.securityfocus.com/bid/99955
http://www.securitytracker.com/id/1038981
https://access.redhat.com/errata/RHSA-2017:2863
https://bugzilla.novell.com/show_bug.cgi?id=1049645
https://bugzilla.redhat.com/show_bug.cgi?id=1473198
https://github.com/torvalds/linux/commit/8f44c9a41386729fea410e688959ddaa9d51be7c
https://www.spinics.net/lists/stable/msg180994.html