Linux drivers/char/lp.c Out-of-Bounds Write. Due to a missing bounds check, and the fact that parport_ptr integer is static, a 'secure boot' kernel command line adversary (can happen due to bootloader vulns, e.g. Google Nexus 6's CVE-2016-10277, where due to a vulnerability the adversary has partial control over the command line) can overflow the parport_nr array in the following code, by appending many (>LP_NO) 'lp=none' arguments to the command line.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Aug 18, 2017 | Jul 17, 2017 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 27, 2017 | May 22, 2017 |
| Suse | — | Upgrade kernel-ec2Upgrade kernel-docsUpgrade kernel-ec2-develUpgrade kernel-defaultUpgrade kernel-ec2-extra | Sep 8, 2017 | Jul 17, 2017 |
| Ubuntu | — | Upgrade linux-image-3.13.0-123-powerpc64-embUpgrade linux-image-powerpc64-embUpgrade linux-image-awsUpgrade linux-image-4.4.0-1022-awsUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-3.13.0-123-powerpc-e500Upgrade linux-image-4.8.0-58-genericUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-83-generic-lpaeUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.8.0-1042-raspi2Upgrade linux-image-lowlatencyUpgrade linux-image-3.13.0-123-generic-lpaeUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-83-powerpc64-smpUpgrade linux-image-powerpc-smpUpgrade linux-image-virtualUpgrade linux-image-4.4.0-1063-snapdragonUpgrade linux-image-3.13.0-123-lowlatencyUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-83-genericUpgrade linux-image-4.4.0-1018-gkeUpgrade linux-image-4.8.0-58-generic-lpaeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-powerpc64-smpUpgrade linux-image-4.8.0-58-powerpc-e500mcUpgrade linux-image-4.8.0-58-lowlatencyUpgrade linux-image-3.13.0-123-genericUpgrade linux-image-generic-lts-trustyUpgrade linux-image-snapdragonUpgrade linux-image-gkeUpgrade linux-image-4.4.0-83-powerpc-smpUpgrade linux-image-powerpc-e500Upgrade linux-image-4.4.0-1061-raspi2Upgrade linux-image-4.8.0-58-powerpc64-embUpgrade linux-image-4.8.0-58-powerpc-smpUpgrade linux-image-4.10.0-26-genericUpgrade linux-image-4.4.0-83-powerpc64-embUpgrade linux-image-3.13.0-123-powerpc-e500mcUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-83-powerpc-e500mcUpgrade linux-image-4.4.0-83-lowlatencyUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.10.0-26-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-3.13.0-123-powerpc-smpUpgrade linux-image-genericUpgrade linux-image-4.10.0-26-generic-lpaeUpgrade linux-image-3.13.0-123-powerpc64-smpUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.10.0-1010-raspi2Upgrade linux-image-powerpc64-smp-lts-xenial | Dec 20, 2017 | Jun 29, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 13, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub