CVE-2017-3196

State: Published
Severity: Not scored
Published: Dec 15, 2017
Updated: Aug 5, 2024
Reserved: Dec 5, 2016

Description

PCAUSA Rawether framework does not properly validate BPF data, allowing a crafted malicious BPF program to perform operations on memory outside of its typical bounds on the driver's receipt of network packets. Local attackers can exploit this issue to execute arbitrary code with SYSTEM privileges.

Scores

The record has no CVSS score.

Weaknesses

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

Affected Products

Product	Versions
ASUS PCE-AC56 WLAN Card UtilitiesPrinting Communications Assoc., Inc. (PCAUSA)	UnknownAffected

References

http://blog.rewolf.pl/blog/?p=1778
https://www.itsecuritynews.info/vuln-printing-communications-association-rawether-cve-2017-3196-local-privilege-escalation-vulnerability/
VU#600671third-party-advisory
96993vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.