The snd_usb_create_streams function in sound/usb/card.c in the Linux kernel before 4.13.6 allows local users to cause a denial of service (out-of-bounds read and system crash) or possibly have unspecified other impact via a crafted USB device.
References
Link | Resource |
---|---|
http://www.securityfocus.com/bid/103284 | Third Party Advisory VDB Entry |
https://github.com/torvalds/linux/commit/bfc81a8bc18e3c4ba0cbaa7666ff76be2f998991 | Patch Third Party Advisory |
https://groups.google.com/d/msg/syzkaller/rDzv5RP_f2M/M5au06qmAwAJ | Third Party Advisory |
https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html | Mailing List Third Party Advisory |
https://usn.ubuntu.com/3754-1/ | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
History
14 Mar 2024, 19:58
Type | Values Removed | Values Added |
---|---|---|
First Time |
Canonical
Canonical ubuntu Linux Debian Debian debian Linux |
|
CPE | cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:* cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:* |
|
References | () http://www.securityfocus.com/bid/103284 - Third Party Advisory, VDB Entry | |
References | () https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html - Mailing List, Third Party Advisory | |
References | () https://usn.ubuntu.com/3754-1/ - Third Party Advisory |
Information
Published : 2017-11-04 01:29
Updated : 2024-03-14 19:58
NVD link : CVE-2017-16529
Mitre link : CVE-2017-16529
CVE.ORG link : CVE-2017-16529
JSON object : View
Products Affected
linux
- linux_kernel
canonical
- ubuntu_linux
debian
- debian_linux
CWE
CWE-125
Out-of-bounds Read