CVE-2017-18379
kernel: out of bound access in drivers/nvme/target/fc.c
Severidad por fuente
La etiqueta propia de Trivy es CRITICAL. Crítica según NVD. Más baja según Red Hat (media), Ubuntu (media).
Descripción
In the Linux kernel before 4.14, an out of boundary access happened in drivers/nvme/target/fc.c.
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| debian 11 | linux | 4.14.2-1 |
| debian 12 | linux | 4.14.2-1 |
| debian 13 | linux | 4.14.2-1 |
| debian 14 | linux | 4.14.2-1 |
| echo | linux | 4.14.2-1 |
| root.io debian 11 | rootio-linux | 4.14.2-1 |
| root.io debian 12 | rootio-linux | 4.14.2-1 |
| root.io debian 13 | rootio-linux | 4.14.2-1 |
| ubuntu 16.04 | linux-azure, linux-gcp, linux-hwe | 4.15.0-1013.13~16.04.2 y 2 más |
| ubuntu 16.04-ESM | linux-azure, linux-gcp, linux-hwe | 4.15.0-1013.13~16.04.2 y 2 más |
Mostrar las 14 entradas de 10 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| debian 11 | linux | 4.14.2-1 |
| debian 12 | linux | 4.14.2-1 |
| debian 13 | linux | 4.14.2-1 |
| debian 14 | linux | 4.14.2-1 |
| echo | linux | 4.14.2-1 |
| root.io debian 11 | rootio-linux | 4.14.2-1 |
| root.io debian 12 | rootio-linux | 4.14.2-1 |
| root.io debian 13 | rootio-linux | 4.14.2-1 |
| ubuntu 16.04 | linux-azure | 4.15.0-1013.13~16.04.2 |
| ubuntu 16.04 | linux-gcp | 4.15.0-1014.14~16.04.1 |
| ubuntu 16.04 | linux-hwe | 4.15.0-24.26~16.04.1 |
| ubuntu 16.04-ESM | linux-azure | 4.15.0-1013.13~16.04.2 |
| ubuntu 16.04-ESM | linux-gcp | 4.15.0-1014.14~16.04.1 |
| ubuntu 16.04-ESM | linux-hwe | 4.15.0-24.26~16.04.1 |
Referencias
- https://access.redhat.com/security/cve/CVE-2017-18379
- https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0c319d3a144d4b8f1ea2047fd614d2149b68f889
- https://git.kernel.org/linus/0c319d3a144d4b8f1ea2047fd614d2149b68f889
- https://github.com/torvalds/linux/commit/0c319d3a144d4b8f1ea2047fd614d2149b68f889
- https://nvd.nist.gov/vuln/detail/CVE-2017-18379
- https://support.f5.com/csp/article/K74012105
- https://support.f5.com/csp/article/K74012105?utm_source=f5support&%3Butm_medium=RSS
- https://www.cve.org/CVERecord?id=CVE-2017-18379