In the Linux kernel before version 4.12, Kerberos 5 tickets decoded when using the RXRPC keys incorrectly assumes the size of a field. This could lead to the size-remaining variable wrapping and the data pointer going over the end of the buffer. This could possibly lead to memory corruption and possible privilege escalation.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Aug 7, 2017 | Aug 3, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-develUpgrade kernel-debugUpgrade perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-tools-libs | Sep 16, 2021 | Jul 30, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-toolsUpgrade python-perfUpgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-debuginfo | Apr 30, 2021 | Jul 30, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-perfUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-develUpgrade perfUpgrade kernel | Dec 11, 2019 | Jul 30, 2018 |
| Oracle_linux | — | Upgrade kernel-uek | Nov 2, 2017 | Jun 26, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 30, 2018 |
| Suse | — | Upgrade kernel-ec2Upgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-docsUpgrade cluster-md-kmp-defaultUpgrade cluster-network-kmp-defaultUpgrade kernel-defaultUpgrade dlm-kmp-defaultUpgrade kernel-ec2-extraUpgrade kernel-ec2-develUpgrade kernel-obs-build | Sep 8, 2017 | Aug 3, 2017 |
| Ubuntu | — | Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-3.13.0-126-powerpc64-embUpgrade linux-image-4.4.0-89-generic-lpaeUpgrade linux-image-3.13.0-126-powerpc-e500Upgrade linux-image-4.4.0-1067-raspi2Upgrade linux-image-3.13.0-126-genericUpgrade linux-image-4.4.0-89-genericUpgrade linux-image-generic-lts-xenialUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-genericUpgrade linux-image-4.4.0-89-lowlatencyUpgrade linux-image-powerpc-e500mcUpgrade linux-image-3.13.0-126-generic-lpaeUpgrade linux-image-raspi2Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-89-powerpc64-embUpgrade linux-image-powerpc-smpUpgrade linux-image-powerpc-e500Upgrade linux-image-lowlatencyUpgrade linux-image-3.13.0-126-lowlatencyUpgrade linux-image-powerpc64-embUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.10.0-30-genericUpgrade linux-image-4.4.0-1028-awsUpgrade linux-image-4.4.0-89-powerpc-smpUpgrade linux-image-gkeUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-3.13.0-126-powerpc-e500mcUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.10.0-30-generic-lpaeUpgrade linux-image-3.13.0-126-powerpc-smpUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.10.0-1013-raspi2Upgrade linux-image-generic-lts-trustyUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-3.13.0-126-powerpc64-smpUpgrade linux-image-4.4.0-89-powerpc64-smpUpgrade linux-image-4.4.0-89-powerpc-e500mcUpgrade linux-image-snapdragonUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-1069-snapdragonUpgrade linux-image-awsUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-4.10.0-30-lowlatencyUpgrade linux-image-4.4.0-1024-gke | Aug 4, 2017 | Aug 3, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 30, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub