crítica
CVE-2017-3114
flash-plugin: multiple code execution issues fixed in APSB17-33
En la Trivy database desde, como mínimo, el 24 oct 2026, 07:11 UTCNo consta cuándo entró antes de ese build.
Severidad por fuente
NVD9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat8.8CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
La etiqueta propia de Trivy es CRITICAL. Crítica según NVD, Red Hat. Más baja según Ubuntu (media).
Descripción
An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is part of providing language- and region- or country- specific functionality. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure.
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| ubuntu 14.04 | adobe-flashplugin, flashplugin-nonfree | 1:20171114.1-0ubuntu0.14.04.1 y 1 más |
| ubuntu 16.04 | adobe-flashplugin, flashplugin-nonfree | 1:20171114.1-0ubuntu0.16.04.1 y 1 más |
| ubuntu 16.04-ESM | flashplugin-nonfree | 27.0.0.187ubuntu0.16.04.1 |
| ubuntu 17.04 | adobe-flashplugin, flashplugin-nonfree | 1:20171114.1-0ubuntu0.17.04.1 y 1 más |
| ubuntu 17.10 | adobe-flashplugin, flashplugin-nonfree | 1:20171114.1-0ubuntu0.17.10.1 y 1 más |
Mostrar las 9 entradas de 5 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| ubuntu 14.04 | adobe-flashplugin | 1:20171114.1-0ubuntu0.14.04.1 |
| ubuntu 14.04 | flashplugin-nonfree | 27.0.0.187ubuntu0.14.04.1 |
| ubuntu 16.04 | adobe-flashplugin | 1:20171114.1-0ubuntu0.16.04.1 |
| ubuntu 16.04 | flashplugin-nonfree | 27.0.0.187ubuntu0.16.04.1 |
| ubuntu 16.04-ESM | flashplugin-nonfree | 27.0.0.187ubuntu0.16.04.1 |
| ubuntu 17.04 | adobe-flashplugin | 1:20171114.1-0ubuntu0.17.04.1 |
| ubuntu 17.04 | flashplugin-nonfree | 27.0.0.187ubuntu0.17.04.1 |
| ubuntu 17.10 | adobe-flashplugin | 1:20171114.1-0ubuntu0.17.10.1 |
| ubuntu 17.10 | flashplugin-nonfree | 27.0.0.187ubuntu0.17.10.1 |
Referencias
- http://www.securityfocus.com/bid/101837
- http://www.securitytracker.com/id/1039778
- https://access.redhat.com/errata/RHSA-2017:3222
- https://access.redhat.com/security/cve/CVE-2017-3114
- https://helpx.adobe.com/security/products/flash-player/apsb17-33.html
- https://nvd.nist.gov/vuln/detail/CVE-2017-3114
- https://security.gentoo.org/glsa/201711-13
- https://www.cve.org/CVERecord?id=CVE-2017-3114