ZeroHour

CVE-2017-7482

CVSS 3.1
7.8 high
EPSS
<1%p39
Published
()
Modified
Description

In the Linux kernel before version 4.12, Kerberos 5 tickets decoded when using the RXRPC keys incorrectly assumes the size of a field. This could lead to the size-remaining variable wrapping and the data pointer going over the end of the buffer. This could possibly lead to memory corruption and possible privilege escalation.

Vendors
linuxdebianredhat
Products
linux kernel, debian linux, enterprise mrg
Weakness
CWE-190
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

In the news

No ingested article mentions this CVE yet.