CVE-2017-1000363 (High) detected in linux-stable-rtv4.1

[mend-bolt-for-github[bot]]

CVE-2017-1000363 - High Severity Vulnerability

Vulnerable Library - linux-stable-rtv4.1

Library home page: https://git.kernel.org/pub/scm/linux/kernel/git/zanussi/linux-stable-rt.git

Found in HEAD commit: 9cafd1b39d091c76656512d15c90a6952f088074

Found in base branch: master

Vulnerable Source Files (1)

/drivers/char/lp.c

Vulnerability Details

Linux drivers/char/lp.c Out-of-Bounds Write. Due to a missing bounds check, and the fact that parport_ptr integer is static, a 'secure boot' kernel command line adversary (can happen due to bootloader vulns, e.g. Google Nexus 6's CVE-2016-10277, where due to a vulnerability the adversary has partial control over the command line) can overflow the parport_nr array in the following code, by appending many (>LP_NO) 'lp=none' arguments to the command line.

Publish Date: 2017-07-17

URL: CVE-2017-1000363

CVSS 3 Score Details (7.8)

Base Score Metrics: - Exploitability Metrics: - Attack Vector: Local - Attack Complexity: Low - Privileges Required: Low - User Interaction: None - Scope: Unchanged - Impact Metrics: - Confidentiality Impact: High - Integrity Impact: High - Availability Impact: High

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Origin: https://www.linuxkernelcves.com/cves/CVE-2017-1000363

Release Date: 2017-07-13

Fix Resolution: v4.12-rc2,v3.16.46,v3.18.55,v3.2.91,v4.1.41,v4.11.3,v4.4.70,v4.9.30

---

Step up your Open Source Security Game with Mend here

[mend-bolt-for-github[bot]]

:heavy_check_mark: This issue was automatically closed by Mend because the vulnerable library in the specific branch(es) was either marked as ignored or it is no longer part of the Mend inventory.