Tracker / CVE-2017-16913
CVE-2017-16913
Medium 5.9
The "stub_recv_cmd_submit()" function (drivers/usb/usbip/stub_rx.c) in the Linux Kernel before version 4.14.8, 4.9.71, and 4.4.114 when handling CMD_SUBMIT packets allows attackers to cause a denial of service (arbitrary memory allocation) via a specially crafted USB over IP packet.
Affected products and versions
| linux | linux_kernel · 4.1.0 → 4.1.49 |
|---|---|
| linux | linux_kernel · 4.14.0 → 4.14.8 |
| linux | linux_kernel · 4.4.0 → 4.4.107 |
| linux | linux_kernel · 4.9.0 → 4.9.71 |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.