Linux drivers/char/lp.c Out-of-Bounds Write. Due to a missing bounds check, and the fact that parport_ptr integer is static, a 'secure boot' kernel command line adversary (can happen due to bootloader vulns, e.g. Google Nexus 6's CVE-2016-10277, where due to a vulnerability the adversary has partial control over the command line) can overflow the parport_nr array in the following code, by appending many (>LP_NO) 'lp=none' arguments to the command line.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Aug 18, 2017 | Jul 17, 2017 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 27, 2017 | May 22, 2017 |
| Suse | — | Upgrade kernel-ec2-develUpgrade kernel-ec2-extraUpgrade kernel-ec2Upgrade kernel-docsUpgrade kernel-default | Sep 8, 2017 | Jul 17, 2017 |
| Ubuntu | — | Upgrade linux-image-4.10.0-26-genericUpgrade linux-image-4.4.0-83-powerpc-e500mcUpgrade linux-image-4.4.0-83-powerpc64-embUpgrade linux-image-4.4.0-83-powerpc-smpUpgrade linux-image-snapdragonUpgrade linux-image-powerpc-e500Upgrade linux-image-4.8.0-58-generic-lpaeUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.8.0-58-powerpc-e500mcUpgrade linux-image-4.8.0-58-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-4.4.0-83-lowlatencyUpgrade linux-image-4.4.0-83-genericUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-4.10.0-26-lowlatencyUpgrade linux-image-3.13.0-123-genericUpgrade linux-image-4.8.0-58-powerpc-smpUpgrade linux-image-4.4.0-1061-raspi2Upgrade linux-image-3.13.0-123-powerpc64-smpUpgrade linux-image-4.8.0-58-powerpc64-embUpgrade linux-image-generic-lts-trustyUpgrade linux-image-3.13.0-123-powerpc-e500mcUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.10.0-1010-raspi2Upgrade linux-image-3.13.0-123-powerpc-smpUpgrade linux-image-4.4.0-1018-gkeUpgrade linux-image-generic-lpaeUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-genericUpgrade linux-image-4.10.0-26-generic-lpaeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-awsUpgrade linux-image-3.13.0-123-generic-lpaeUpgrade linux-image-4.4.0-83-generic-lpaeUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-1063-snapdragonUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.8.0-1042-raspi2Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-1022-awsUpgrade linux-image-powerpc64-embUpgrade linux-image-4.8.0-58-genericUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-3.13.0-123-powerpc64-embUpgrade linux-image-4.4.0-83-powerpc64-smpUpgrade linux-image-powerpc-smpUpgrade linux-image-virtualUpgrade linux-image-3.13.0-123-powerpc-e500Upgrade linux-image-raspi2Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-3.13.0-123-lowlatency | Dec 20, 2017 | Jun 29, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 13, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub