search

panasalap / linux-4.1.15

Other
0 stars 0 forks source link

CVE-2017-2636 (High) detected in linux179e72b561d3d331c850e1a5779688d7a7de5246 #1066

Open mend-bolt-for-github[bot] opened 1 year ago

mend-bolt-for-github[bot] commented 1 year ago

CVE-2017-2636 - High Severity Vulnerability

Vulnerable Library - linux179e72b561d3d331c850e1a5779688d7a7de5246

Linux kernel stable tree mirror

Library home page: https://github.com/gregkh/linux.git

Found in base branch: master

Vulnerable Source Files (1)

/drivers/tty/n_hdlc.c

Vulnerability Details

Race condition in drivers/tty/n_hdlc.c in the Linux kernel through 4.10.1 allows local users to gain privileges or cause a denial of service (double free) by setting the HDLC line discipline.

Publish Date: 2017-03-07

URL: CVE-2017-2636

CVSS 3 Score Details (7.0)

Base Score Metrics: - Exploitability Metrics: - Attack Vector: Local - Attack Complexity: High - Privileges Required: Low - User Interaction: None - Scope: Unchanged - Impact Metrics: - Confidentiality Impact: High - Integrity Impact: High - Availability Impact: High

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Origin: https://www.linuxkernelcves.com/cves/CVE-2017-2636

Release Date: 2017-03-07

Fix Resolution: v4.11-rc2,v3.12.72,v3.16.42,v3.18.49,v3.2.87,v4.1.49,v4.10.3,v4.4.54,v4.9.15

Step up your Open Source Security Game with Mend here

mend-bolt-for-github[bot] commented 11 months ago

:information_source: This issue was automatically re-opened by Mend because the vulnerable library in the specific branch(es) has been detected in the Mend inventory.