Tracker / CVE-2017-16912
CVE-2017-16912
Medium 5.9
The "get_pipe()" function (drivers/usb/usbip/stub_rx.c) in the Linux Kernel before version 4.14.8, 4.9.71, and 4.4.114 allows attackers to cause a denial of service (out-of-bounds read) via a specially crafted USB over IP packet.
Affected products and versions
| linux | linux_kernel · 4.1.0 → 4.1.49 |
|---|---|
| linux | linux_kernel · 4.14.0 → 4.14.8 |
| linux | linux_kernel · 4.4.0 → 4.4.107 |
| linux | linux_kernel · 4.9.0 → 4.9.71 |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.