CVE-2017-18379
kernel: out of bound access in drivers/nvme/target/fc.c
Einstufung nach Quelle
Trivys eigenes Label ist CRITICAL. Kritisch laut NVD. Niedriger laut Red Hat (mittel), Ubuntu (mittel).
Beschreibung
In the Linux kernel before 4.14, an out of boundary access happened in drivers/nvme/target/fc.c.
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| debian 11 | linux | 4.14.2-1 |
| debian 12 | linux | 4.14.2-1 |
| debian 13 | linux | 4.14.2-1 |
| debian 14 | linux | 4.14.2-1 |
| echo | linux | 4.14.2-1 |
| root.io debian 11 | rootio-linux | 4.14.2-1 |
| root.io debian 12 | rootio-linux | 4.14.2-1 |
| root.io debian 13 | rootio-linux | 4.14.2-1 |
| ubuntu 16.04 | linux-azure, linux-gcp, linux-hwe | 4.15.0-1013.13~16.04.2 und 2 weitere |
| ubuntu 16.04-ESM | linux-azure, linux-gcp, linux-hwe | 4.15.0-1013.13~16.04.2 und 2 weitere |
Alle 14 Einträge aus 10 Quellen zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| debian 11 | linux | 4.14.2-1 |
| debian 12 | linux | 4.14.2-1 |
| debian 13 | linux | 4.14.2-1 |
| debian 14 | linux | 4.14.2-1 |
| echo | linux | 4.14.2-1 |
| root.io debian 11 | rootio-linux | 4.14.2-1 |
| root.io debian 12 | rootio-linux | 4.14.2-1 |
| root.io debian 13 | rootio-linux | 4.14.2-1 |
| ubuntu 16.04 | linux-azure | 4.15.0-1013.13~16.04.2 |
| ubuntu 16.04 | linux-gcp | 4.15.0-1014.14~16.04.1 |
| ubuntu 16.04 | linux-hwe | 4.15.0-24.26~16.04.1 |
| ubuntu 16.04-ESM | linux-azure | 4.15.0-1013.13~16.04.2 |
| ubuntu 16.04-ESM | linux-gcp | 4.15.0-1014.14~16.04.1 |
| ubuntu 16.04-ESM | linux-hwe | 4.15.0-24.26~16.04.1 |
Referenzen
- https://access.redhat.com/security/cve/CVE-2017-18379
- https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0c319d3a144d4b8f1ea2047fd614d2149b68f889
- https://git.kernel.org/linus/0c319d3a144d4b8f1ea2047fd614d2149b68f889
- https://github.com/torvalds/linux/commit/0c319d3a144d4b8f1ea2047fd614d2149b68f889
- https://nvd.nist.gov/vuln/detail/CVE-2017-18379
- https://support.f5.com/csp/article/K74012105
- https://support.f5.com/csp/article/K74012105?utm_source=f5support&%3Butm_medium=RSS
- https://www.cve.org/CVERecord?id=CVE-2017-18379