The usb_serial_console_disconnect function in drivers/usb/serial/console.c in the Linux kernel before 4.13.8 allows local users to cause a denial of service (use-after-free and system crash) or possibly have unspecified other impact via a crafted USB device, related to disconnection and failed setup.
References
Link | Resource |
---|---|
http://www.securityfocus.com/bid/102028 | Third Party Advisory VDB Entry |
https://github.com/torvalds/linux/commit/299d7572e46f98534033a9e65973f13ad1ce9047 | Patch Third Party Advisory |
https://github.com/torvalds/linux/commit/bd998c2e0df0469707503023d50d46cf0b10c787 | Patch Third Party Advisory |
https://groups.google.com/d/msg/syzkaller/cMACrmo1x0k/4KhRoUgABAAJ | Third Party Advisory |
https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html | Mailing List Third Party Advisory |
https://usn.ubuntu.com/3583-1/ | Third Party Advisory |
https://usn.ubuntu.com/3583-2/ | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
History
01 Apr 2024, 15:43
Type | Values Removed | Values Added |
---|---|---|
First Time |
Canonical
Canonical ubuntu Linux Debian Debian debian Linux |
|
CPE | cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:* cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:* cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:* |
|
References | () http://www.securityfocus.com/bid/102028 - Third Party Advisory, VDB Entry | |
References | () https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html - Mailing List, Third Party Advisory | |
References | () https://usn.ubuntu.com/3583-1/ - Third Party Advisory | |
References | () https://usn.ubuntu.com/3583-2/ - Third Party Advisory |
Information
Published : 2017-11-04 01:29
Updated : 2024-04-01 15:43
NVD link : CVE-2017-16525
Mitre link : CVE-2017-16525
CVE.ORG link : CVE-2017-16525
JSON object : View
Products Affected
linux
- linux_kernel
canonical
- ubuntu_linux
debian
- debian_linux
CWE
CWE-416
Use After Free