CVE-2017-16911
- State
- Published
- Severity
- Not scored
- Published
- Jan 31, 2018
- Updated
- Sep 16, 2024
- Reserved
- Nov 21, 2017
Description
The vhci_hcd driver in the Linux Kernel before version 4.14.8 and 4.4.114 allows allows local attackers to disclose kernel memory addresses. Successful exploitation requires that a USB device is attached over IP.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
Linux KernelFlexera Software LLC |
|
References
- DSA-4187vendor-advisory
- USN-3619-2vendor-advisory
- https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.114
- https://secuniaresearch.flexerasoftware.com/advisories/80454/
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git/commit/drivers/usb/usbip?id=2f2d0088eb93db5c649d2a5e34a3800a8a935fc5
- https://www.spinics.net/lists/linux-usb/msg163480.html
- USN-3754-1vendor-advisory
- https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.8
- 102156vdb-entry
- https://secuniaresearch.flexerasoftware.com/secunia_research/2017-20/
- [debian-lts-announce] 20180502 [SECURITY] [DLA 1369-1] linux security updatemailing-list
- USN-3619-1vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.