Linux drivers/char/lp.c Out-of-Bounds Write. Due to a missing bounds check, and the fact that parport_ptr integer is static, a 'secure boot' kernel command line adversary (can happen due to bootloader vulns, e.g. Google Nexus 6's CVE-2016-10277, where due to a vulnerability the adversary has partial control over the command line) can overflow the parport_nr array in the following code, by appending many (>LP_NO) 'lp=none' arguments to the command line.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Aug 18, 2017 | Jul 17, 2017 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 27, 2017 | May 22, 2017 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-ec2Upgrade kernel-ec2-develUpgrade kernel-ec2-extraUpgrade kernel-default | Sep 8, 2017 | Jul 17, 2017 |
| Ubuntu | — | Upgrade linux-image-4.10.0-26-genericUpgrade linux-image-4.4.0-83-powerpc-smpUpgrade linux-image-4.4.0-83-powerpc-e500mcUpgrade linux-image-4.4.0-83-powerpc64-embUpgrade linux-image-gkeUpgrade linux-image-generic-lts-trustyUpgrade linux-image-snapdragonUpgrade linux-image-4.10.0-26-lowlatencyUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-3.13.0-123-powerpc-smpUpgrade linux-image-3.13.0-123-genericUpgrade linux-image-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-powerpc-e500Upgrade linux-image-powerpc64-smpUpgrade linux-image-4.10.0-26-generic-lpaeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.8.0-58-powerpc64-embUpgrade linux-image-4.4.0-1061-raspi2Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-1018-gkeUpgrade linux-image-3.13.0-123-powerpc64-smpUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.8.0-58-powerpc-smpUpgrade linux-image-4.4.0-83-lowlatencyUpgrade linux-image-generic-lts-xenialUpgrade linux-image-3.13.0-123-powerpc-e500mcUpgrade linux-image-4.8.0-58-powerpc-e500mcUpgrade linux-image-4.4.0-83-genericUpgrade linux-image-4.8.0-58-generic-lpaeUpgrade linux-image-4.10.0-1010-raspi2Upgrade linux-image-4.8.0-58-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-1022-awsUpgrade linux-image-3.13.0-123-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-3.13.0-123-powerpc-e500Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-83-generic-lpaeUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-83-powerpc64-smpUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.8.0-1042-raspi2Upgrade linux-image-powerpc64-embUpgrade linux-image-3.13.0-123-powerpc64-embUpgrade linux-image-4.4.0-1063-snapdragonUpgrade linux-image-4.8.0-58-genericUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-powerpc-smpUpgrade linux-image-3.13.0-123-lowlatency | Dec 20, 2017 | Jun 29, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 13, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub