critical
CVE-2017-3114
flash-plugin: multiple code execution issues fixed in APSB17-33
In the Trivy database since at least 24 Oct 2026, 07:11 UTCWhen it arrived before that build is not recorded.
Severity by source
NVD9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat8.8CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Trivy's own label is CRITICAL. Rated critical by NVD, Red Hat. Rated lower by Ubuntu (medium).
Description
An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is part of providing language- and region- or country- specific functionality. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure.
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| ubuntu 14.04 | adobe-flashplugin, flashplugin-nonfree | 1:20171114.1-0ubuntu0.14.04.1 and 1 more |
| ubuntu 16.04 | adobe-flashplugin, flashplugin-nonfree | 1:20171114.1-0ubuntu0.16.04.1 and 1 more |
| ubuntu 16.04-ESM | flashplugin-nonfree | 27.0.0.187ubuntu0.16.04.1 |
| ubuntu 17.04 | adobe-flashplugin, flashplugin-nonfree | 1:20171114.1-0ubuntu0.17.04.1 and 1 more |
| ubuntu 17.10 | adobe-flashplugin, flashplugin-nonfree | 1:20171114.1-0ubuntu0.17.10.1 and 1 more |
Show all 9 entries from 5 sources
| Source | Package | Fixed in |
|---|---|---|
| ubuntu 14.04 | adobe-flashplugin | 1:20171114.1-0ubuntu0.14.04.1 |
| ubuntu 14.04 | flashplugin-nonfree | 27.0.0.187ubuntu0.14.04.1 |
| ubuntu 16.04 | adobe-flashplugin | 1:20171114.1-0ubuntu0.16.04.1 |
| ubuntu 16.04 | flashplugin-nonfree | 27.0.0.187ubuntu0.16.04.1 |
| ubuntu 16.04-ESM | flashplugin-nonfree | 27.0.0.187ubuntu0.16.04.1 |
| ubuntu 17.04 | adobe-flashplugin | 1:20171114.1-0ubuntu0.17.04.1 |
| ubuntu 17.04 | flashplugin-nonfree | 27.0.0.187ubuntu0.17.04.1 |
| ubuntu 17.10 | adobe-flashplugin | 1:20171114.1-0ubuntu0.17.10.1 |
| ubuntu 17.10 | flashplugin-nonfree | 27.0.0.187ubuntu0.17.10.1 |
References
- http://www.securityfocus.com/bid/101837
- http://www.securitytracker.com/id/1039778
- https://access.redhat.com/errata/RHSA-2017:3222
- https://access.redhat.com/security/cve/CVE-2017-3114
- https://helpx.adobe.com/security/products/flash-player/apsb17-33.html
- https://nvd.nist.gov/vuln/detail/CVE-2017-3114
- https://security.gentoo.org/glsa/201711-13
- https://www.cve.org/CVERecord?id=CVE-2017-3114