CVE-2017-16533

medium
New! CVE Severity Now Using CVSS v3

The calculated severity for CVEs has been updated to use CVSS v3 by default. CVEs that do not have a CVSS v3 score will fall back CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.

Description

The usbhid_parse function in drivers/hid/usbhid/hid-core.c in the Linux kernel before 4.13.8 allows local users to cause a denial of service (out-of-bounds read and system crash) or possibly have unspecified other impact via a crafted USB device.

References

http://www.securityfocus.com/bid/102026

https://github.com/torvalds/linux/commit/f043bfc98c193c284e2cd768fefabe18ac2fed9b

https://groups.google.com/d/msg/syzkaller/CxkJ9QZgwlM/O3IOvAaGAwAJ

https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html

https://usn.ubuntu.com/3754-1/

Details

Source: MITRE

Published: 2017-11-04

Updated: 2018-08-24

Type: CWE-125

Risk Information

CVSS v2

Base Score: 7.2

Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

Impact Score: 10

Exploitability Score: 3.9

Severity: HIGH

CVSS v3

Base Score: 6.6

Vector: CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Impact Score: 5.9

Exploitability Score: 0.7

Severity: MEDIUM

Vulnerable Software

Configuration 1

OR

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions up to 4.13.7 (inclusive)

Tenable Plugins

View all (28 total)

IDNameProductFamilySeverity
125283SUSE SLES12 Security Update : kernel (SUSE-SU-2019:1289-1) (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout)NessusSuSE Local Security Checks
high
124983EulerOS Virtualization for ARM 64 3.0.1.0 : kernel (EulerOS-SA-2019-1530)NessusHuawei Local Security Checks
high
124824EulerOS Virtualization 3.0.1.0 : kernel (EulerOS-SA-2019-1501)NessusHuawei Local Security Checks
high
123366openSUSE Security Update : the Linux Kernel (openSUSE-2019-893)NessusSuSE Local Security Checks
high
121468SUSE SLES11 Security Update : kernel (SUSE-SU-2019:13937-1)NessusSuSE Local Security Checks
high
120151SUSE SLED15 / SLES15 Security Update : kernel (SUSE-SU-2018:3589-1)NessusSuSE Local Security Checks
high
119647SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2018:4069-1)NessusSuSE Local Security Checks
high
119286SUSE SLES12 Security Update : kernel (SUSE-SU-2018:3934-1)NessusSuSE Local Security Checks
high
118952SUSE SLES11 Security Update : kernel (SUSE-SU-2018:3746-1)NessusSuSE Local Security Checks
high
118818openSUSE Security Update : the Linux Kernel (openSUSE-2018-1342)NessusSuSE Local Security Checks
high
112113Ubuntu 14.04 LTS : Linux kernel vulnerabilities (USN-3754-1)NessusUbuntu Local Security Checks
critical
700352Google Chrome < 64.0.3282.119 Multiple VulnerabilitiesNessus Network MonitorWeb Clients
high
109881Oracle Linux 6 : Unbreakable Enterprise kernel (ELSA-2018-4110)NessusOracle Linux Local Security Checks
high
109829Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4109)NessusOracle Linux Local Security Checks
high
109668OracleVM 3.3 : Unbreakable / etc (OVMSA-2018-0041) (Spectre)NessusOracleVM Local Security Checks
high
109543Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4089)NessusOracle Linux Local Security Checks
high
109524Oracle Linux 6 : Unbreakable Enterprise kernel (ELSA-2018-4088)NessusOracle Linux Local Security Checks
high
109158OracleVM 3.4 : Unbreakable / etc (OVMSA-2018-0035) (Dirty COW) (Meltdown) (Spectre)NessusOracleVM Local Security Checks
high
109156Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4071)NessusOracle Linux Local Security Checks
high
105521OracleVM 3.4 : Unbreakable / etc (OVMSA-2018-0002)NessusOracleVM Local Security Checks
high
105520Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4001)NessusOracle Linux Local Security Checks
high
105116Debian DLA-1200-1 : linux security update (KRACK)NessusDebian Local Security Checks
high
104911EulerOS 2.0 SP2 : kernel (EulerOS-SA-2017-1292)NessusHuawei Local Security Checks
medium
104910EulerOS 2.0 SP1 : kernel (EulerOS-SA-2017-1291)NessusHuawei Local Security Checks
medium
104737Ubuntu 17.10 : linux, linux-raspi2 vulnerabilities (USN-3487-1)NessusUbuntu Local Security Checks
high
104735Ubuntu 14.04 LTS : linux-aws vulnerabilities (USN-3485-3)NessusUbuntu Local Security Checks
high
104717Ubuntu 14.04 LTS : linux-lts-xenial vulnerabilities (USN-3485-2)NessusUbuntu Local Security Checks
high
104716Ubuntu 16.04 LTS : linux, linux-aws, linux-gke, linux-kvm, linux-raspi2, linux-snapdragon vulnerabilities (USN-3485-1)NessusUbuntu Local Security Checks
high