CVE-2017-1000380

medium
New! CVE Severity Now Using CVSS v3

The calculated severity for CVEs has been updated to use CVSS v3 by default. CVEs that do not have a CVSS v3 score will fall back CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.

Description

sound/core/timer.c in the Linux kernel before 4.11.5 is vulnerable to a data race in the ALSA /dev/snd/timer driver resulting in local users being able to read information belonging to other users, i.e., uninitialized memory contents may be disclosed when a read and an ioctl happen at the same time.

References

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ba3021b2c79b2fa9114f92790a99deb27a65b728

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d11662f4f798b50d8c8743f433842c3e40fe3378

http://www.debian.org/security/2017/dsa-3981

http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.11.5

http://www.openwall.com/lists/oss-security/2017/06/12/2

http://www.securityfocus.com/bid/99121

https://access.redhat.com/errata/RHSA-2017:3295

https://access.redhat.com/errata/RHSA-2017:3315

https://access.redhat.com/errata/RHSA-2017:3322

https://github.com/torvalds/linux/commit/ba3021b2c79b2fa9114f92790a99deb27a65b728

https://github.com/torvalds/linux/commit/d11662f4f798b50d8c8743f433842c3e40fe3378

https://source.android.com/security/bulletin/pixel/2017-12-01

Details

Source: MITRE

Published: 2017-06-17

Updated: 2017-12-06

Type: CWE-200

Risk Information

CVSS v2

Base Score: 2.1

Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N

Impact Score: 2.9

Exploitability Score: 3.9

Severity: LOW

CVSS v3

Base Score: 5.5

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Impact Score: 3.6

Exploitability Score: 1.8

Severity: MEDIUM

Vulnerable Software

Configuration 1

OR

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions up to 4.11.4 (inclusive)

Tenable Plugins

View all (37 total)

IDNameProductFamilySeverity
127152NewStart CGSL MAIN 5.04 : kernel Multiple Vulnerabilities (NS-SA-2019-0007)NessusNewStart CGSL Local Security Checks
medium
124829EulerOS Virtualization for ARM 64 3.0.1.0 : kernel (EulerOS-SA-2019-1506)NessusHuawei Local Security Checks
high
106469OracleVM 3.4 : Unbreakable / etc (OVMSA-2018-0015) (BlueBorne) (Meltdown) (Spectre) (Stack Clash)NessusOracleVM Local Security Checks
critical
105248OracleVM 3.4 : Unbreakable / etc (OVMSA-2017-0174) (BlueBorne) (Dirty COW) (Stack Clash)NessusOracleVM Local Security Checks
high
105247Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3659)NessusOracle Linux Local Security Checks
high
105147OracleVM 3.3 : Unbreakable / etc (OVMSA-2017-0173) (BlueBorne) (Stack Clash)NessusOracleVM Local Security Checks
high
105145Oracle Linux 6 : Unbreakable Enterprise kernel (ELSA-2017-3658)NessusOracle Linux Local Security Checks
high
105144Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3657)NessusOracle Linux Local Security Checks
high
105056CentOS 7 : kernel (CESA-2017:3315)NessusCentOS Local Security Checks
medium
104989Scientific Linux Security Update : kernel on SL7.x x86_64 (20171130)NessusScientific Linux Local Security Checks
medium
104986RHEL 6 : MRG (RHSA-2017:3295)NessusRed Hat Local Security Checks
medium
104950RHEL 7 : kernel-rt (RHSA-2017:3322)NessusRed Hat Local Security Checks
medium
104949RHEL 7 : kernel (RHSA-2017:3315)NessusRed Hat Local Security Checks
medium
104947Oracle Linux 7 : kernel (ELSA-2017-3315)NessusOracle Linux Local Security Checks
medium
104910EulerOS 2.0 SP1 : kernel (EulerOS-SA-2017-1291)NessusHuawei Local Security Checks
medium
104454OracleVM 3.3 : Unbreakable / etc (OVMSA-2017-0168)NessusOracleVM Local Security Checks
high
104374SUSE SLES12 Security Update : kernel (SUSE-SU-2017:2920-1) (KRACK) (Stack Clash)NessusSuSE Local Security Checks
critical
104371Oracle Linux 6 : Unbreakable Enterprise kernel (ELSA-2017-3637)NessusOracle Linux Local Security Checks
high
104370Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3636)NessusOracle Linux Local Security Checks
high
104271SUSE SLES12 Security Update : kernel (SUSE-SU-2017:2908-1) (KRACK) (Stack Clash)NessusSuSE Local Security Checks
critical
103365Debian DSA-3981-1 : linux - security update (BlueBorne) (Stack Clash)NessusDebian Local Security Checks
high
103363Debian DLA-1099-1 : linux security update (BlueBorne) (Stack Clash)NessusDebian Local Security Checks
high
103354SUSE SLES11 Security Update : kernel (SUSE-SU-2017:2525-1) (Stack Clash)NessusSuSE Local Security Checks
critical
103110SUSE SLES11 Security Update : kernel (SUSE-SU-2017:2389-1) (Stack Clash)NessusSuSE Local Security Checks
high
102774OracleVM 3.4 : Unbreakable / etc (OVMSA-2017-0145) (Stack Clash)NessusOracleVM Local Security Checks
critical
102773Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3609)NessusOracle Linux Local Security Checks
critical
102071Ubuntu 16.04 LTS : linux-hwe vulnerabilities (USN-3371-1)NessusUbuntu Local Security Checks
medium
102064OracleVM 3.4 : Unbreakable / etc (OVMSA-2017-0126) (Stack Clash)NessusOracleVM Local Security Checks
critical
102059Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3595)NessusOracle Linux Local Security Checks
critical
101973Ubuntu 16.04 LTS : linux-aws, linux-gke vulnerabilities (USN-3364-3)NessusUbuntu Local Security Checks
medium
101952Ubuntu 14.04 LTS : linux-lts-xenial vulnerabilities (USN-3364-2)NessusUbuntu Local Security Checks
medium
101951Ubuntu 16.04 LTS : linux, linux-raspi2, linux-snapdragon vulnerabilities (USN-3364-1)NessusUbuntu Local Security Checks
medium
101928Ubuntu 14.04 LTS : linux vulnerabilities (USN-3360-1)NessusUbuntu Local Security Checks
critical
101894Ubuntu 16.10 : linux, linux-raspi2 vulnerabilities (USN-3359-1)NessusUbuntu Local Security Checks
critical
101893Ubuntu 17.04 : linux, linux-raspi2 vulnerabilities (USN-3358-1)NessusUbuntu Local Security Checks
medium
101762SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2017:1853-1) (Stack Clash)NessusSuSE Local Security Checks
high
101127openSUSE Security Update : the Linux Kernel (openSUSE-2017-716) (Stack Clash)NessusSuSE Local Security Checks
high