7.8

CVE-2017-8072

The cp2112_gpio_direction_input function in drivers/hid/hid-cp2112.c in the Linux kernel 4.9.x before 4.9.9 does not have the expected EIO error status for a zero-length report, which allows local users to have an unspecified impact via unknown vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version4.9
Linux ≫ Linux Kernel Version4.9.1
Linux ≫ Linux Kernel Version4.9.2
Linux ≫ Linux Kernel Version4.9.3
Linux ≫ Linux Kernel Version4.9.4
Linux ≫ Linux Kernel Version4.9.5
Linux ≫ Linux Kernel Version4.9.6
Linux ≫ Linux Kernel Version4.9.8
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.41% 0.323
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.openwall.com/lists/oss-security/2017/04/16/4
Patch
Third Party Advisory
Mailing List
http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.9
Vendor Advisory
Release Notes
http://www.securityfocus.com/bid/98010
Third Party Advisory
VDB Entry
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=8e9faa15469ed7c7467423db4c62aeed3ff4cae3
Patch
https://github.com/torvalds/linux/commit/8e9faa15469ed7c7467423db4c62aeed3ff4cae3
Patch