Integer overflow in the cs_winkernel_malloc function in winkernel_mm.c in Capstone 3.0.4 and earlier allows attackers to cause a denial of service (heap-based buffer overflow in a kernel driver) or possibly have unspecified other impact via a large value.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Integer overflow in the cs_winkernel_malloc function in winkernel_mm.c in Capstone 3.0.4 and earlier
    allows attackers to cause a denial of service (heap-based buffer overflow in a kernel driver) or possibly
    have unspecified other impact via a large value. (CVE-2017-6952)

update to upstream 3.0.5 to fix CVE-2017-6952

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
434865	SCA: security update for capstone (GHSA-3v99-hpv7-9hh9)	Tenable Cloud Security	SCA Checks	high
434865	SCA: security update for capstone (GHSA-3v99-hpv7-9hh9)	Tenable Self-Hosted Container Security	SCA Checks	high
120637	Fedora 29 : capstone (2018-974e947d3b)	Nessus	Fedora Local Security Checks	high
120577	Fedora 28 : capstone (2018-83bc247d3b)	Nessus	Fedora Local Security Checks	high
117371	Fedora 27 : capstone (2018-236b486e01)	Nessus	Fedora Local Security Checks	high

Detections

Analytics

CVE-2017-6952

high

Tenable Plugins

high

high

high

high

high