In the Linux kernel before version 4.12, Kerberos 5 tickets decoded when using the RXRPC keys incorrectly assumes the size of a field. This could lead to the size-remaining variable wrapping and the data pointer going over the end of the buffer. This could possibly lead to memory corruption and possible privilege escalation.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Aug 7, 2017 | Aug 3, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-develUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64 | Sep 16, 2021 | Jul 30, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfoUpgrade perfUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-toolsUpgrade kernelUpgrade python-perf | Apr 30, 2021 | Jul 30, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernelUpgrade perfUpgrade kernel-devel | Dec 11, 2019 | Jul 30, 2018 |
| Oracle_linux | — | Upgrade kernel-uek | Nov 2, 2017 | Jun 26, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 30, 2018 |
| Suse | — | Upgrade kernel-ec2-develUpgrade kernel-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-ec2-extraUpgrade dlm-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade cluster-network-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-ec2 | Sep 8, 2017 | Aug 3, 2017 |
| Ubuntu | — | Upgrade linux-image-4.4.0-89-generic-lpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-3.13.0-126-powerpc-e500Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-powerpc-e500Upgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-89-powerpc64-embUpgrade linux-image-3.13.0-126-generic-lpaeUpgrade linux-image-raspi2Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-3.13.0-126-genericUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-1067-raspi2Upgrade linux-image-generic-lts-xenialUpgrade linux-image-genericUpgrade linux-image-3.13.0-126-powerpc64-embUpgrade linux-image-powerpc-smpUpgrade linux-image-3.13.0-126-lowlatencyUpgrade linux-image-4.4.0-89-genericUpgrade linux-image-4.4.0-89-lowlatencyUpgrade linux-image-powerpc64-embUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-awsUpgrade linux-image-3.13.0-126-powerpc64-smpUpgrade linux-image-4.4.0-89-powerpc-e500mcUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-1028-awsUpgrade linux-image-powerpc64-smpUpgrade linux-image-3.13.0-126-powerpc-e500mcUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.10.0-30-lowlatencyUpgrade linux-image-4.4.0-89-powerpc-smpUpgrade linux-image-4.10.0-30-genericUpgrade linux-image-4.10.0-30-generic-lpaeUpgrade linux-image-4.10.0-1013-raspi2Upgrade linux-image-gkeUpgrade linux-image-generic-lts-trustyUpgrade linux-image-snapdragonUpgrade linux-image-3.13.0-126-powerpc-smpUpgrade linux-image-4.4.0-1069-snapdragonUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-89-powerpc64-smpUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-1024-gke | Aug 4, 2017 | Aug 3, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 30, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub