csaf_redhat - rhsa-2018

rhsa-2018_0676

Vulnerability from csaf_redhat

Published

2018-04-10 09:01

Modified

2024-09-13 16:50

Summary

Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update

Notes

Topic

An update for kernel-rt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: Buffer overflow in firewire driver via crafted incoming packets (CVE-2016-8633, Important) * kernel: Use-after-free vulnerability in DCCP socket (CVE-2017-8824, Important) * Kernel: kvm: nVMX: L2 guest could access hardware(L0) CR8 register (CVE-2017-12154, Important) * kernel: v4l2: disabled memory access protection mechanism allowing privilege escalation (CVE-2017-13166, Important) * kernel: media: use-after-free in [tuner-xc2028] media driver (CVE-2016-7913, Moderate) * kernel: drm/vmwgfx: fix integer overflow in vmw_surface_define_ioctl() (CVE-2017-7294, Moderate) * kernel: Incorrect type conversion for size during dma allocation (CVE-2017-9725, Moderate) * kernel: memory leak when merging buffers in SCSI IO vectors (CVE-2017-12190, Moderate) * kernel: vfs: BUG in truncate_inode_pages_range() and fuse client (CVE-2017-15121, Moderate) * kernel: Use-after-free in userfaultfd_event_wait_completion function in userfaultfd.c (CVE-2017-15126, Moderate) * kernel: net: double-free and memory corruption in get_net_ns_by_id() (CVE-2017-15129, Moderate) * kernel: Use-after-free in snd_seq_ioctl_create_port() (CVE-2017-15265, Moderate) * kernel: Incorrect handling in arch/x86/include/asm/mmu_context.h:init_new_context function allowing use-after-free (CVE-2017-17053, Moderate) * kernel: Missing capabilities check in net/netfilter/nfnetlink_cthelper.c allows for unprivileged access to systemwide nfnl_cthelper_list structure (CVE-2017-17448, Moderate) * kernel: Missing namespace check in net/netlink/af_netlink.c allows for network monitors to observe systemwide activity (CVE-2017-17449, Moderate) * kernel: Unallocated memory access by malicious USB device via bNumInterfaces overflow (CVE-2017-17558, Moderate) * kernel: netfilter: use-after-free in tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c (CVE-2017-18017, Moderate) * kernel: Race condition in drivers/md/dm.c:dm_get_from_kobject() allows local users to cause a denial of service (CVE-2017-18203, Moderate) * kernel: kvm: Reachable BUG() on out-of-bounds guest IRQ (CVE-2017-1000252, Moderate) * Kernel: KVM: DoS via write flood to I/O port 0x80 (CVE-2017-1000407, Moderate) * kernel: Stack information leak in the EFS element (CVE-2017-1000410, Moderate) * kernel: Kernel address information leak in drivers/acpi/sbshc.c:acpi_smbus_hc_add() function potentially allowing KASLR bypass (CVE-2018-5750, Moderate) * kernel: Race condition in sound system can lead to denial of service (CVE-2018-1000004, Moderate) * kernel: unlimiting the stack disables ASLR (CVE-2016-3672, Low) * kernel: Missing permission check in move_pages system call (CVE-2017-14140, Low) * kernel: Null pointer dereference in rngapi_reset function (CVE-2017-15116, Low) * kernel: Improper error handling of VM_SHARED hugetlbfs mapping in mm/hugetlb.c (CVE-2017-15127, Low) * kernel: Integer overflow in futex.c:futux_requeue can lead to denial of service or unspecified impact (CVE-2018-6927, Low) For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section. Red Hat would like to thank Eyal Itkin for reporting CVE-2016-8633; Mohamed Ghannam for reporting CVE-2017-8824; Jim Mattson (Google.com) for reporting CVE-2017-12154; Vitaly Mayatskih for reporting CVE-2017-12190; Andrea Arcangeli (Engineering) for reporting CVE-2017-15126; Kirill Tkhai for reporting CVE-2017-15129; Jan H. Schönherr (Amazon) for reporting CVE-2017-1000252; and Armis Labs for reporting CVE-2017-1000410. The CVE-2017-15121 issue was discovered by Miklos Szeredi (Red Hat) and the CVE-2017-15116 issue was discovered by ChunYu Wang (Red Hat). Additional Changes: See the Red Hat Enterprise Linux 7.5 Release Notes linked from References.

This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for kernel-rt is now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.\n\nSecurity Fix(es):\n\n* kernel: Buffer overflow in firewire driver via crafted incoming packets (CVE-2016-8633, Important)\n\n* kernel: Use-after-free vulnerability in DCCP socket (CVE-2017-8824, Important)\n\n* Kernel: kvm: nVMX: L2 guest could access hardware(L0) CR8 register (CVE-2017-12154, Important)\n\n* kernel: v4l2: disabled memory access protection mechanism allowing privilege escalation (CVE-2017-13166, Important)\n\n* kernel: media: use-after-free in [tuner-xc2028] media driver (CVE-2016-7913, Moderate)\n\n* kernel: drm/vmwgfx: fix integer overflow in vmw_surface_define_ioctl() (CVE-2017-7294, Moderate)\n\n* kernel: Incorrect type conversion for size during dma allocation (CVE-2017-9725, Moderate)\n\n* kernel: memory leak when merging buffers in SCSI IO vectors (CVE-2017-12190, Moderate)\n\n* kernel: vfs: BUG in truncate_inode_pages_range() and fuse client (CVE-2017-15121, Moderate)\n\n* kernel: Use-after-free in userfaultfd_event_wait_completion function in userfaultfd.c (CVE-2017-15126, Moderate)\n\n* kernel: net: double-free and memory corruption in get_net_ns_by_id() (CVE-2017-15129, Moderate)\n\n* kernel: Use-after-free in snd_seq_ioctl_create_port() (CVE-2017-15265, Moderate)\n\n* kernel: Incorrect handling in arch/x86/include/asm/mmu_context.h:init_new_context function allowing use-after-free (CVE-2017-17053, Moderate)\n\n* kernel: Missing capabilities check in net/netfilter/nfnetlink_cthelper.c allows for unprivileged access to systemwide nfnl_cthelper_list structure (CVE-2017-17448, Moderate)\n\n* kernel: Missing namespace check in net/netlink/af_netlink.c allows for network monitors to observe systemwide activity (CVE-2017-17449, Moderate)\n\n* kernel: Unallocated memory access by malicious USB device via bNumInterfaces overflow (CVE-2017-17558, Moderate)\n\n* kernel: netfilter: use-after-free in tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c (CVE-2017-18017, Moderate)\n\n* kernel: Race condition in drivers/md/dm.c:dm_get_from_kobject() allows local users to cause a denial of service (CVE-2017-18203, Moderate)\n\n* kernel: kvm: Reachable BUG() on out-of-bounds guest IRQ (CVE-2017-1000252, Moderate)\n\n* Kernel: KVM: DoS via write flood to I/O port 0x80 (CVE-2017-1000407, Moderate)\n\n* kernel: Stack information leak in the EFS element (CVE-2017-1000410, Moderate)\n\n* kernel: Kernel address information leak in drivers/acpi/sbshc.c:acpi_smbus_hc_add() function potentially allowing KASLR bypass (CVE-2018-5750, Moderate)\n\n* kernel: Race condition in sound system can lead to denial of service (CVE-2018-1000004, Moderate)\n\n* kernel: unlimiting the stack disables ASLR (CVE-2016-3672, Low)\n\n* kernel: Missing permission check in move_pages system call (CVE-2017-14140, Low)\n\n* kernel: Null pointer dereference in rngapi_reset function (CVE-2017-15116, Low)\n\n* kernel: Improper error handling of VM_SHARED hugetlbfs mapping in mm/hugetlb.c (CVE-2017-15127, Low)\n\n* kernel: Integer overflow in futex.c:futux_requeue can lead to denial of service or unspecified impact (CVE-2018-6927, Low)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.\n\nRed Hat would like to thank Eyal Itkin for reporting CVE-2016-8633; Mohamed Ghannam for reporting CVE-2017-8824; Jim Mattson (Google.com) for reporting CVE-2017-12154; Vitaly Mayatskih for reporting CVE-2017-12190; Andrea Arcangeli (Engineering) for reporting CVE-2017-15126; Kirill Tkhai for reporting CVE-2017-15129; Jan H. Sch\u00f6nherr (Amazon) for reporting CVE-2017-1000252; and Armis Labs for reporting CVE-2017-1000410. The CVE-2017-15121 issue was discovered by Miklos Szeredi (Red Hat) and the CVE-2017-15116 issue was discovered by ChunYu Wang (Red Hat).\n\nAdditional Changes:\n\nSee the Red Hat Enterprise Linux 7.5 Release Notes linked from References.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat offerings.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2018:0676",
        "url": "https://access.redhat.com/errata/RHSA-2018:0676"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/7.5_Release_Notes/index.html",
        "url": "https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/7.5_Release_Notes/index.html"
      },
      {
        "category": "external",
        "summary": "1292927",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1292927"
      },
      {
        "category": "external",
        "summary": "1324749",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324749"
      },
      {
        "category": "external",
        "summary": "1391490",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1391490"
      },
      {
        "category": "external",
        "summary": "1401061",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1401061"
      },
      {
        "category": "external",
        "summary": "1402885",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402885"
      },
      {
        "category": "external",
        "summary": "1430418",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1430418"
      },
      {
        "category": "external",
        "summary": "1436798",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1436798"
      },
      {
        "category": "external",
        "summary": "1448770",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1448770"
      },
      {
        "category": "external",
        "summary": "1452589",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1452589"
      },
      {
        "category": "external",
        "summary": "1462329",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1462329"
      },
      {
        "category": "external",
        "summary": "1488329",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1488329"
      },
      {
        "category": "external",
        "summary": "1489088",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1489088"
      },
      {
        "category": "external",
        "summary": "1490781",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490781"
      },
      {
        "category": "external",
        "summary": "1491224",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1491224"
      },
      {
        "category": "external",
        "summary": "1495089",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1495089"
      },
      {
        "category": "external",
        "summary": "1500894",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1500894"
      },
      {
        "category": "external",
        "summary": "1501878",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1501878"
      },
      {
        "category": "external",
        "summary": "1503749",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1503749"
      },
      {
        "category": "external",
        "summary": "1506255",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1506255"
      },
      {
        "category": "external",
        "summary": "1507270",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1507270"
      },
      {
        "category": "external",
        "summary": "1509264",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1509264"
      },
      {
        "category": "external",
        "summary": "1514609",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1514609"
      },
      {
        "category": "external",
        "summary": "1518274",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1518274"
      },
      {
        "category": "external",
        "summary": "1518638",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1518638"
      },
      {
        "category": "external",
        "summary": "1519160",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1519160"
      },
      {
        "category": "external",
        "summary": "1519591",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1519591"
      },
      {
        "category": "external",
        "summary": "1520328",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1520328"
      },
      {
        "category": "external",
        "summary": "1520893",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1520893"
      },
      {
        "category": "external",
        "summary": "1523481",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1523481"
      },
      {
        "category": "external",
        "summary": "1525218",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1525218"
      },
      {
        "category": "external",
        "summary": "1525474",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1525474"
      },
      {
        "category": "external",
        "summary": "1525762",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1525762"
      },
      {
        "category": "external",
        "summary": "1525768",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1525768"
      },
      {
        "category": "external",
        "summary": "1531135",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1531135"
      },
      {
        "category": "external",
        "summary": "1531174",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1531174"
      },
      {
        "category": "external",
        "summary": "1535315",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1535315"
      },
      {
        "category": "external",
        "summary": "1539706",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1539706"
      },
      {
        "category": "external",
        "summary": "1544612",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1544612"
      },
      {
        "category": "external",
        "summary": "1548412",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1548412"
      },
      {
        "category": "external",
        "summary": "1550811",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1550811"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://access.redhat.com/security/data/csaf/v2/advisories/2018/rhsa-2018_0676.json"
      }
    ],
    "title": "Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update",
    "tracking": {
      "current_release_date": "2024-09-13T16:50:21+00:00",
      "generator": {
        "date": "2024-09-13T16:50:21+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "3.33.3"
        }
      },
      "id": "RHSA-2018:0676",
      "initial_release_date": "2018-04-10T09:01:12+00:00",
      "revision_history": [
        {
          "date": "2018-04-10T09:01:12+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2018-04-10T09:01:12+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-09-13T16:50:21+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux for Real Time for NFV (v. 7)",
                "product": {
                  "name": "Red Hat Enterprise Linux for Real Time for NFV (v. 7)",
                  "product_id": "7Server-NFV-7.5",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_extras_rt:7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux for Real Time (v. 7)",
                "product": {
                  "name": "Red Hat Enterprise Linux for Real Time (v. 7)",
                  "product_id": "7Server-RT-7.5",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_extras_rt:7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
                "product": {
                  "name": "kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
                  "product_id": "kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-debug-debuginfo@3.10.0-862.rt56.804.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
                "product": {
                  "name": "kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
                  "product_id": "kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-trace-devel@3.10.0-862.rt56.804.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
                "product": {
                  "name": "kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
                  "product_id": "kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt@3.10.0-862.rt56.804.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
                "product": {
                  "name": "kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
                  "product_id": "kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-devel@3.10.0-862.rt56.804.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
                "product": {
                  "name": "kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
                  "product_id": "kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-trace-debuginfo@3.10.0-862.rt56.804.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
                "product": {
                  "name": "kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
                  "product_id": "kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-debug@3.10.0-862.rt56.804.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
                "product": {
                  "name": "kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
                  "product_id": "kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-trace@3.10.0-862.rt56.804.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
                "product": {
                  "name": "kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
                  "product_id": "kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-debug-devel@3.10.0-862.rt56.804.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
                "product": {
                  "name": "kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
                  "product_id": "kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-debuginfo@3.10.0-862.rt56.804.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
                "product": {
                  "name": "kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
                  "product_id": "kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-debuginfo-common-x86_64@3.10.0-862.rt56.804.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
                "product": {
                  "name": "kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
                  "product_id": "kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-kvm-debuginfo@3.10.0-862.rt56.804.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
                "product": {
                  "name": "kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
                  "product_id": "kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-debug-kvm-debuginfo@3.10.0-862.rt56.804.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
                "product": {
                  "name": "kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
                  "product_id": "kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-trace-kvm@3.10.0-862.rt56.804.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
                "product": {
                  "name": "kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
                  "product_id": "kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-trace-kvm-debuginfo@3.10.0-862.rt56.804.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
                "product": {
                  "name": "kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
                  "product_id": "kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-kvm@3.10.0-862.rt56.804.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
                "product": {
                  "name": "kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
                  "product_id": "kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-debug-kvm@3.10.0-862.rt56.804.el7?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
                "product": {
                  "name": "kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
                  "product_id": "kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-doc@3.10.0-862.rt56.804.el7?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-rt-0:3.10.0-862.rt56.804.el7.src",
                "product": {
                  "name": "kernel-rt-0:3.10.0-862.rt56.804.el7.src",
                  "product_id": "kernel-rt-0:3.10.0-862.rt56.804.el7.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt@3.10.0-862.rt56.804.el7?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-0:3.10.0-862.rt56.804.el7.src as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)",
          "product_id": "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src"
        },
        "product_reference": "kernel-rt-0:3.10.0-862.rt56.804.el7.src",
        "relates_to_product_reference": "7Server-NFV-7.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)",
          "product_id": "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64"
        },
        "product_reference": "kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
        "relates_to_product_reference": "7Server-NFV-7.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)",
          "product_id": "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64"
        },
        "product_reference": "kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
        "relates_to_product_reference": "7Server-NFV-7.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)",
          "product_id": "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
        },
        "product_reference": "kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
        "relates_to_product_reference": "7Server-NFV-7.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)",
          "product_id": "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64"
        },
        "product_reference": "kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
        "relates_to_product_reference": "7Server-NFV-7.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)",
          "product_id": "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64"
        },
        "product_reference": "kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
        "relates_to_product_reference": "7Server-NFV-7.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)",
          "product_id": "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
        },
        "product_reference": "kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
        "relates_to_product_reference": "7Server-NFV-7.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)",
          "product_id": "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
        },
        "product_reference": "kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
        "relates_to_product_reference": "7Server-NFV-7.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)",
          "product_id": "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64"
        },
        "product_reference": "kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
        "relates_to_product_reference": "7Server-NFV-7.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)",
          "product_id": "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64"
        },
        "product_reference": "kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
        "relates_to_product_reference": "7Server-NFV-7.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)",
          "product_id": "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch"
        },
        "product_reference": "kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
        "relates_to_product_reference": "7Server-NFV-7.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)",
          "product_id": "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64"
        },
        "product_reference": "kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
        "relates_to_product_reference": "7Server-NFV-7.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)",
          "product_id": "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
        },
        "product_reference": "kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
        "relates_to_product_reference": "7Server-NFV-7.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)",
          "product_id": "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64"
        },
        "product_reference": "kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
        "relates_to_product_reference": "7Server-NFV-7.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)",
          "product_id": "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
        },
        "product_reference": "kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
        "relates_to_product_reference": "7Server-NFV-7.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)",
          "product_id": "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64"
        },
        "product_reference": "kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
        "relates_to_product_reference": "7Server-NFV-7.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)",
          "product_id": "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64"
        },
        "product_reference": "kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
        "relates_to_product_reference": "7Server-NFV-7.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)",
          "product_id": "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
        },
        "product_reference": "kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
        "relates_to_product_reference": "7Server-NFV-7.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-0:3.10.0-862.rt56.804.el7.src as a component of Red Hat Enterprise Linux for Real Time (v. 7)",
          "product_id": "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src"
        },
        "product_reference": "kernel-rt-0:3.10.0-862.rt56.804.el7.src",
        "relates_to_product_reference": "7Server-RT-7.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7)",
          "product_id": "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64"
        },
        "product_reference": "kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
        "relates_to_product_reference": "7Server-RT-7.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7)",
          "product_id": "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64"
        },
        "product_reference": "kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
        "relates_to_product_reference": "7Server-RT-7.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7)",
          "product_id": "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
        },
        "product_reference": "kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
        "relates_to_product_reference": "7Server-RT-7.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7)",
          "product_id": "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64"
        },
        "product_reference": "kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
        "relates_to_product_reference": "7Server-RT-7.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7)",
          "product_id": "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64"
        },
        "product_reference": "kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
        "relates_to_product_reference": "7Server-RT-7.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7)",
          "product_id": "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
        },
        "product_reference": "kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
        "relates_to_product_reference": "7Server-RT-7.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7)",
          "product_id": "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
        },
        "product_reference": "kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
        "relates_to_product_reference": "7Server-RT-7.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7)",
          "product_id": "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64"
        },
        "product_reference": "kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
        "relates_to_product_reference": "7Server-RT-7.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7)",
          "product_id": "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64"
        },
        "product_reference": "kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
        "relates_to_product_reference": "7Server-RT-7.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch as a component of Red Hat Enterprise Linux for Real Time (v. 7)",
          "product_id": "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch"
        },
        "product_reference": "kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
        "relates_to_product_reference": "7Server-RT-7.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7)",
          "product_id": "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64"
        },
        "product_reference": "kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
        "relates_to_product_reference": "7Server-RT-7.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7)",
          "product_id": "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
        },
        "product_reference": "kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
        "relates_to_product_reference": "7Server-RT-7.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7)",
          "product_id": "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64"
        },
        "product_reference": "kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
        "relates_to_product_reference": "7Server-RT-7.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7)",
          "product_id": "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
        },
        "product_reference": "kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
        "relates_to_product_reference": "7Server-RT-7.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7)",
          "product_id": "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64"
        },
        "product_reference": "kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
        "relates_to_product_reference": "7Server-RT-7.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7)",
          "product_id": "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64"
        },
        "product_reference": "kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
        "relates_to_product_reference": "7Server-RT-7.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7)",
          "product_id": "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
        },
        "product_reference": "kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
        "relates_to_product_reference": "7Server-RT-7.5"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2016-3672",
      "cwe": {
        "id": "CWE-341",
        "name": "Predictable from Observable State"
      },
      "discovery_date": "2016-04-06T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1324749"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A weakness was found in the Linux ASLR implementation. Any user able to running 32-bit applications in a x86 machine can disable ASLR by setting the RLIMIT_STACK resource to unlimited.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: unlimiting the stack disables ASLR",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue affects the Linux kernel packages as shipped with Red Hat Enterprise Linux 5, 6. This has been rated as having Low security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.\n\nThis issue affects the Linux kernel packages as shipped with Red Hat Enterprise Linux 7 and MRG-2. Future Linux kernel updates for the respective releases might address this issue.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
          "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
          "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
          "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
          "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2016-3672"
        },
        {
          "category": "external",
          "summary": "RHBZ#1324749",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324749"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2016-3672",
          "url": "https://www.cve.org/CVERecord?id=CVE-2016-3672"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-3672",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-3672"
        },
        {
          "category": "external",
          "summary": "http://hmarco.org/bugs/CVE-2016-3672-Unlimiting-the-stack-not-longer-disables-ASLR.html",
          "url": "http://hmarco.org/bugs/CVE-2016-3672-Unlimiting-the-stack-not-longer-disables-ASLR.html"
        },
        {
          "category": "external",
          "summary": "http://seclists.org/bugtraq/2016/Apr/34",
          "url": "http://seclists.org/bugtraq/2016/Apr/34"
        }
      ],
      "release_date": "2016-04-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
          "product_ids": [
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2018:0676"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 4.6,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "kernel: unlimiting the stack disables ASLR"
    },
    {
      "cve": "CVE-2016-7913",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2016-01-28T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1402885"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The xc2028_set_config function in drivers/media/tuners/tuner-xc2028.c in the Linux kernel before 4.6 allows local users to gain privileges or cause a denial of service (use-after-free) via vectors involving omission of the firmware name from a certain data structure. Due to the nature of the flaw, privilege escalation cannot be fully ruled out, although we believe it is unlikely.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: media: use-after-free in [tuner-xc2028] media driver",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue does not affect the Linux kernel packages as shipped with Red Hat Enterprise Linux 5, 6 as the code with the flaw is not present in the products listed.\n\nThis issue affects the Linux kernel packages as shipped with Red Hat Enterprise Linux 7 and Red Hat Enterprise MRG-2. Future Linux kernel updates for the respective releases might address this issue.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
          "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
          "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
          "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
          "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2016-7913"
        },
        {
          "category": "external",
          "summary": "RHBZ#1402885",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402885"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2016-7913",
          "url": "https://www.cve.org/CVERecord?id=CVE-2016-7913"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-7913",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-7913"
        }
      ],
      "release_date": "2016-01-28T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
          "product_ids": [
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2018:0676"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 9.3,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "kernel: media: use-after-free in [tuner-xc2028] media driver"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Eyal Itkin"
          ]
        }
      ],
      "cve": "CVE-2016-8633",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2016-11-02T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1391490"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A buffer overflow vulnerability due to a lack of input filtering of incoming fragmented datagrams was found in the IP-over-1394 driver [firewire-net] in a fragment handling code in the Linux kernel. The vulnerability exists since firewire supported IPv4, i.e. since version 2.6.31 (year 2009) till version v4.9-rc4. A maliciously formed fragment with a respectively large datagram offset would cause a memcpy() past the datagram buffer, which would cause a system panic or possible arbitrary code execution.\r\n\r\nThe flaw requires [firewire-net] module to be loaded and is remotely exploitable from connected firewire devices, but not over a local network.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: Buffer overflow in firewire driver via crafted incoming packets",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue affects the Linux kernel packages as shipped with Red Hat Enterprise Linux 6, 7 and MRG 2.x. This issue has been rated as having Moderate security impact. Future Linux kernel updates for the respective releases might address this issue.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
          "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
          "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
          "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
          "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2016-8633"
        },
        {
          "category": "external",
          "summary": "RHBZ#1391490",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1391490"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2016-8633",
          "url": "https://www.cve.org/CVERecord?id=CVE-2016-8633"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-8633",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-8633"
        }
      ],
      "release_date": "2016-11-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
          "product_ids": [
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2018:0676"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 5.9,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:L/AC:M/Au:N/C:P/I:P/A:C",
            "version": "2.0"
          },
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "PHYSICAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "kernel: Buffer overflow in firewire driver via crafted incoming packets"
    },
    {
      "cve": "CVE-2017-7294",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "discovery_date": "2017-03-28T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1436798"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds write vulnerability was found in the Linux kernel\u0027s vmw_surface_define_ioctl() function, in the \u0027drivers/gpu/drm/vmwgfx/vmwgfx_surface.c\u0027 file. Due to the nature of the flaw, privilege escalation cannot be fully ruled out, although we believe it is unlikely.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: drm/vmwgfx: fix integer overflow in vmw_surface_define_ioctl()",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue does not affect the Linux kernel packages as shipped with Red Hat Enterprise Linux 5 as the code where the flaw was found is not present in this product.\n\nThis issue affects the Linux kernel packages as shipped with Red Hat Enterprise Linux 6, 7 and MRG-2. Future Linux kernel updates for the respective releases might address this issue.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
          "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
          "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
          "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
          "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-7294"
        },
        {
          "category": "external",
          "summary": "RHBZ#1436798",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1436798"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-7294",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-7294"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-7294",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-7294"
        }
      ],
      "release_date": "2017-03-28T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
          "product_ids": [
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2018:0676"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "kernel: drm/vmwgfx: fix integer overflow in vmw_surface_define_ioctl()"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Mohamed Ghannam"
          ]
        }
      ],
      "cve": "CVE-2017-8824",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2017-11-30T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1519591"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A use-after-free vulnerability was found in DCCP socket code affecting the Linux kernel since 2.6.16. This vulnerability could allow an attacker to their escalate privileges.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: Use-after-free vulnerability in DCCP socket",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue affects the versions of the Linux kernel as shipped with Red Hat Enterprise Linux 5, 6, 7, Red Hat Enterprise MRG 2 and real-time kernels. Future updates for the respective releases may address this issue.\n\nThis issue does not affect the Linux kernel packages as shipped with Red Hat Enterprise Linux 7 for ARM and Red Hat Enterprise Linux 7 for Power LE.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
          "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
          "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
          "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
          "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-8824"
        },
        {
          "category": "external",
          "summary": "RHBZ#1519591",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1519591"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-8824",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-8824"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-8824",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-8824"
        }
      ],
      "release_date": "2017-12-05T05:43:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
          "product_ids": [
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2018:0676"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "kernel: Use-after-free vulnerability in DCCP socket"
    },
    {
      "cve": "CVE-2017-9725",
      "cwe": {
        "id": "CWE-681",
        "name": "Incorrect Conversion between Numeric Types"
      },
      "discovery_date": "2017-09-05T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1489088"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found where the kernel truncated the value used to indicate the size of a buffer which it would later become zero using an untruncated value. This can corrupt memory outside of the original allocation.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: Incorrect type conversion for size during dma allocation",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue does not affect the Linux kernel packages as shipped with Red Hat Enterprise Linux 5 and 6.\n\nThis issue affects the Linux kernel packages as shipped with Red Hat Enterprise Linux 7 and MRG-2.\n\nFuture Linux kernel updates for the respective releases may address this issue.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
          "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
          "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
          "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
          "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-9725"
        },
        {
          "category": "external",
          "summary": "RHBZ#1489088",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1489088"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-9725",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-9725"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-9725",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-9725"
        },
        {
          "category": "external",
          "summary": "https://source.android.com/security/bulletin/2017-09-01",
          "url": "https://source.android.com/security/bulletin/2017-09-01"
        }
      ],
      "release_date": "2015-10-12T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
          "product_ids": [
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2018:0676"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "kernel: Incorrect type conversion for size during dma allocation"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Jim Mattson"
          ],
          "organization": "Google.com"
        }
      ],
      "cve": "CVE-2017-12154",
      "cwe": {
        "id": "CWE-284",
        "name": "Improper Access Control"
      },
      "discovery_date": "2017-09-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1491224"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Linux kernel built with the KVM visualization support (CONFIG_KVM), with nested visualization (nVMX) feature enabled (nested=1), is vulnerable to a crash due to disabled external interrupts. As L2 guest could access (r/w) hardware CR8 register of the host(L0). In a nested visualization setup, L2 guest user could use this flaw to potentially crash the host(L0) resulting in DoS.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Kernel: kvm: nVMX: L2 guest could access hardware(L0) CR8 register",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue does not affect the versions of the kernel package as shipped with\nRed Hat Enterprise Linux 5, 6, 7 and Red Hat Enterprise MRG 2.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
          "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
          "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
          "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
          "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-12154"
        },
        {
          "category": "external",
          "summary": "RHBZ#1491224",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1491224"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12154",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-12154"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12154",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12154"
        }
      ],
      "release_date": "2017-09-12T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
          "product_ids": [
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2018:0676"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "HIGH",
            "accessVector": "ADJACENT_NETWORK",
            "authentication": "SINGLE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 4.3,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:A/AC:H/Au:S/C:N/I:N/A:C",
            "version": "2.0"
          },
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Kernel: kvm: nVMX: L2 guest could access hardware(L0) CR8 register"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Vitaly Mayatskih"
          ]
        }
      ],
      "cve": "CVE-2017-12190",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2017-09-22T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1495089"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "It was found that in the Linux kernel through v4.14-rc5, bio_map_user_iov() and bio_unmap_user() in \u0027block/bio.c\u0027 do unbalanced pages refcounting if IO vector has small consecutive buffers belonging to the same page. bio_add_pc_page() merges them into one, but the page reference is never dropped, causing a memory leak and possible system lockup due to out-of-memory condition.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: memory leak when merging buffers in SCSI IO vectors",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue affects the Linux kernel packages as shipped with Red Hat Enterprise Linux 5. This is not currently planned to be addressed in future updates of the product due to its life cycle. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.\n\nThis issue affects the Linux kernel packages as shipped with Red Hat Enterprise Linux 6, 7 and MRG-2. Future updates for the respective releases may address this issue.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
          "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
          "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
          "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
          "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-12190"
        },
        {
          "category": "external",
          "summary": "RHBZ#1495089",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1495089"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12190",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-12190"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12190",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12190"
        }
      ],
      "release_date": "2017-09-21T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
          "product_ids": [
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2018:0676"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.2,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "kernel: memory leak when merging buffers in SCSI IO vectors"
    },
    {
      "cve": "CVE-2017-13166",
      "cwe": {
        "id": "CWE-266",
        "name": "Incorrect Privilege Assignment"
      },
      "discovery_date": "2018-02-22T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1548412"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A bug in the 32-bit compatibility layer of the ioctl handling code of the v4l2 video driver in the Linux kernel has been found. A memory protection mechanism ensuring that user-provided buffers always point to a userspace memory were disabled, allowing destination address to be in a kernel space. This flaw could be exploited by an attacker to overwrite a kernel memory from an unprivileged userspace process, leading to privilege escalation.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: v4l2: disabled memory access protection mechanism allowing privilege escalation",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
          "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
          "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
          "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
          "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-13166"
        },
        {
          "category": "external",
          "summary": "RHBZ#1548412",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1548412"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13166",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-13166"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13166",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13166"
        }
      ],
      "release_date": "2017-07-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
          "product_ids": [
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2018:0676"
        },
        {
          "category": "workaround",
          "details": "A systemtap script intercepting v4l2_compat_ioctl32() function of the [videodev] module and making it to return -ENOIOCTLCMD error value would work just fine, except breaking all 32bit video capturing software, but not 64bit ones.\n\nAlternatively, blacklisting [videodev] module will work too, but it will break all video capturing software.",
          "product_ids": [
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "kernel: v4l2: disabled memory access protection mechanism allowing privilege escalation"
    },
    {
      "cve": "CVE-2017-13305",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2018-04-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1581637"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Linux kernel\u0027s implementation of valid_master_desc() in which a memory buffer would be compared to a userspace value with an incorrect size of comparison. By bruteforcing the comparison, an attacker could determine what was in memory after the description and possibly obtain sensitive information from kernel memory.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: Buffer over-read in keyring subsystem allows exposing potentially sensitive information to local attacker",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
          "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
          "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
          "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
          "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-13305"
        },
        {
          "category": "external",
          "summary": "RHBZ#1581637",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1581637"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13305",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-13305"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13305",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13305"
        }
      ],
      "release_date": "2017-06-08T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
          "product_ids": [
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2018:0676"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "kernel: Buffer over-read in keyring subsystem allows exposing potentially sensitive information to local attacker"
    },
    {
      "cve": "CVE-2017-14140",
      "cwe": {
        "id": "CWE-863",
        "name": "Incorrect Authorization"
      },
      "discovery_date": "2017-09-03T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1488329"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The move_pages system call in mm/migrate.c in the Linux kernel doesn\u0027t check the effective uid of the target process. This enables a local attacker to learn the memory layout of a setuid executable allowing mitigation of ASLR.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: Missing permission check in move_pages system call",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
          "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
          "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
          "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
          "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-14140"
        },
        {
          "category": "external",
          "summary": "RHBZ#1488329",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1488329"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-14140",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-14140"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-14140",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-14140"
        }
      ],
      "release_date": "2017-08-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
          "product_ids": [
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2018:0676"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "kernel: Missing permission check in move_pages system call"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "ChunYu Wang"
          ],
          "organization": "Red Hat",
          "summary": "This issue was discovered by Red Hat."
        }
      ],
      "cve": "CVE-2017-15116",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "discovery_date": "2017-08-28T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1514609"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Linux kernel\u0027s random number generator API. A null pointer dereference in the rngapi_reset function may result in denial of service, crashing the system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: Null pointer dereference in rngapi_reset function",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue does not affect the Linux kernel packages as shipped with Red Hat\nEnterprise Linux 5 and 6 and kernel-alt.\n\nThis issue affects the Linux kernel packages as shipped with Red Hat\nEnterprise Linux 7 and MRG-2.\n\nFuture Linux kernel updates for the respective releases may address this issue.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
          "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
          "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
          "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
          "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-15116"
        },
        {
          "category": "external",
          "summary": "RHBZ#1514609",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1514609"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-15116",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-15116"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-15116",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-15116"
        }
      ],
      "release_date": "2017-08-28T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
          "product_ids": [
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2018:0676"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "kernel: Null pointer dereference in rngapi_reset function"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Miklos Szeredi"
          ],
          "organization": "Red Hat",
          "summary": "This issue was discovered by Red Hat."
        }
      ],
      "cve": "CVE-2017-15121",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "discovery_date": "2017-10-21T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1520893"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A non-privileged user is able to mount a fuse filesystem on RHEL 6 or 7 and crash a system if an application punches a hole in a file that does not end aligned to a page boundary.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: vfs: BUG in truncate_inode_pages_range() and fuse client",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue does not affect the Linux kernel packages as shipped with Red Hat Enterprise Linux 5, Red Hat Enterprise Linux 7 for ARM and Red Hat Enterprise Linux 7 for Power LE.\n\nThis issue affects the versions of the Linux kernel as shipped with 6, 7 and Red Hat Enterprise MRG 2. Future updates for the respective releases may address this issue.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
          "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
          "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
          "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
          "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-15121"
        },
        {
          "category": "external",
          "summary": "RHBZ#1520893",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1520893"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-15121",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-15121"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-15121",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-15121"
        }
      ],
      "release_date": "2017-12-05T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
          "product_ids": [
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2018:0676"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "kernel: vfs: BUG in truncate_inode_pages_range() and fuse client"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Andrea Arcangeli"
          ],
          "organization": "Red Hat Engineering",
          "summary": "This issue was discovered by Red Hat."
        }
      ],
      "cve": "CVE-2017-15126",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "discovery_date": "2017-12-08T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1523481"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Linux kernel\u0027s handling of fork failure when dealing with event messages in the userfaultfd code. Failure to fork correctly can create a fork event that will be removed from an already freed list of events.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: Use-after-free in userfaultfd_event_wait_completion function in userfaultfd.c",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue does not affect the Linux kernel packages as shipped with Red Hat Enterprise Linux 5 and 6.\n\nThis issue affects the Linux kernel packages as shipped with Red Hat\nEnterprise Linux 7, realtime, MRG-2 prior to version kernel-3.10.0-781.\n\nThe kernel-alt package already as shipped contains this fix.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
          "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
          "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
          "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
          "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-15126"
        },
        {
          "category": "external",
          "summary": "RHBZ#1523481",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1523481"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-15126",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-15126"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-15126",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-15126"
        }
      ],
      "release_date": "2017-12-05T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
          "product_ids": [
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2018:0676"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "kernel: Use-after-free in userfaultfd_event_wait_completion function in userfaultfd.c"
    },
    {
      "cve": "CVE-2017-15127",
      "cwe": {
        "id": "CWE-460",
        "name": "Improper Cleanup on Thrown Exception"
      },
      "discovery_date": "2017-12-08T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1525218"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Linux kernel when freeing pages in hugetlbfs. This could trigger a local denial of service by crashing the kernel.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: Improper error handling of VM_SHARED hugetlbfs mapping in mm/hugetlb.c",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
          "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
          "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
          "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
          "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-15127"
        },
        {
          "category": "external",
          "summary": "RHBZ#1525218",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1525218"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-15127",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-15127"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-15127",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-15127"
        }
      ],
      "release_date": "2017-12-08T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
          "product_ids": [
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2018:0676"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "kernel: Improper error handling of VM_SHARED hugetlbfs mapping in mm/hugetlb.c"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Kirill Tkhai"
          ]
        }
      ],
      "cve": "CVE-2017-15129",
      "cwe": {
        "id": "CWE-362",
        "name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
      },
      "discovery_date": "2017-12-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1531174"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A use-after-free vulnerability was found in a network namespaces code affecting the Linux kernel since v4.0-rc1 through v4.15-rc5. The function get_net_ns_by_id() does not check for the net::count value after it has found a peer network in netns_ids idr which could lead to double free and memory corruption. This vulnerability could allow an unprivileged local user to induce kernel memory corruption on the system, leading to a crash. Due to the nature of the flaw, privilege escalation cannot be fully ruled out, although it is thought to be unlikely.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: net: double-free and memory corruption in get_net_ns_by_id()",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue does not affect the versions of the Linux kernel as shipped with Red Hat Enterprise Linux 5 and 6 as the code with the flaw is not present in the products listed.\n\nThis issue affects the versions of the Linux kernel as shipped with Red Hat Enterprise Linux 7, its real-time kernel, Red Hat Enterprise MRG 2, Red Hat Enterprise Linux 7 for ARM 64 and Red Hat Enterprise Linux 7 for Power 9 LE. Future updates for the respective releases may address this issue.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
          "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
          "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
          "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
          "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-15129"
        },
        {
          "category": "external",
          "summary": "RHBZ#1531174",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1531174"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-15129",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-15129"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-15129",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-15129"
        }
      ],
      "release_date": "2017-12-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
          "product_ids": [
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2018:0676"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "kernel: net: double-free and memory corruption in get_net_ns_by_id()"
    },
    {
      "cve": "CVE-2017-15265",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2017-10-11T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1501878"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A use-after-free vulnerability was found when issuing an ioctl to a sound device. This could allow a user to exploit a race condition and create memory corruption or possibly privilege escalation.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: Use-after-free in snd_seq_ioctl_create_port()",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue affects the Linux kernel packages as shipped with Red Hat\nEnterprise Linux 5,6, 7, realtime and MRG-2.\n\nRed Hat Enterprise Linux 5 has transitioned to Production phase 3.  \nDuring the Production 3 Phase, Critical impact Security Advisories (RHSAs) \nand selected Urgent Priority Bug Fix Advisories (RHBAs) may be released \nas they become available.\n\nThe official life cycle policy can be reviewed here:\n\nhttp://redhat.com/rhel/lifecycle\n\nFuture Linux kernel updates for the respective releases may address this issue.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
          "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
          "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
          "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
          "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-15265"
        },
        {
          "category": "external",
          "summary": "RHBZ#1501878",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1501878"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-15265",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-15265"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-15265",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-15265"
        }
      ],
      "release_date": "2017-10-11T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
          "product_ids": [
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2018:0676"
        },
        {
          "category": "workaround",
          "details": "It is possible to prevent the affected code from being loaded by blacklisting the kernel module snd_seq.  Instructions relating to how to blacklist a kernel module are shown here: https://access.redhat.com/solutions/41278 \n\nAlternatively a custom permission set can be created by udev, the correct permissions will depend on your use case.  Please contact Red Hat customer support for creating a rule set that can minimize flaw exposure.",
          "product_ids": [
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "kernel: Use-after-free in snd_seq_ioctl_create_port()"
    },
    {
      "cve": "CVE-2017-15274",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "discovery_date": "2017-10-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1500391"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the implementation of associative arrays where the add_key systemcall and KEYCTL_UPDATE operations allowed for a NULL payload with a nonzero length. When accessing the payload within this length parameters value, an unprivileged user could trivially cause a NULL pointer dereference (kernel oops).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: dereferencing NULL payload with nonzero length",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue affects the Linux kernel packages as shipped with Red Hat Enterprise\nLinux 5,6,7, MRG-2 and realtime kernels.\n\nRed Hat Enterprise Linux 5 has transitioned to Production phase 3.  \nDuring the Production 3 Phase, Critical impact Security Advisories (RHSAs) \nand selected Urgent Priority Bug Fix Advisories (RHBAs) may be released \nas they become available.\n\nAt this time this bug is not meet this critera and is unlikley to be fixed\nfor these releases.\n\nThe official life cycle policy can be reviewed here:\n\nhttp://redhat.com/rhel/lifecycle\n\nFuture Linux kernel updates for the products in production phase 1 and 2, namely Red Hat Enterprise\nLinux 6, 7 and MRG-2 may address this issue.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
          "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
          "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
          "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
          "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-15274"
        },
        {
          "category": "external",
          "summary": "RHBZ#1500391",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1500391"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-15274",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-15274"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-15274",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-15274"
        }
      ],
      "release_date": "2017-06-08T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
          "product_ids": [
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2018:0676"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "kernel: dereferencing NULL payload with nonzero length"
    },
    {
      "cve": "CVE-2017-17448",
      "cwe": {
        "id": "CWE-284",
        "name": "Improper Access Control"
      },
      "discovery_date": "2017-12-14T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1525768"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The net/netfilter/nfnetlink_cthelper.c function in the Linux kernel through 4.14.4 does not require the CAP_NET_ADMIN capability for new, get, and del operations. This allows local users to bypass intended access restrictions because the nfnl_cthelper_list data structure is shared across all net namespaces.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: Missing capabilities check in net/netfilter/nfnetlink_cthelper.c allows for unprivileged access to systemwide nfnl_cthelper_list structure",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue does not affect the Linux kernel packages as shipped with Red Hat Enterprise Linux 5, 6 and Red Hat Enterprise MRG 2, as a code with the flaw is not present or is not built in the products listed.\n\nThis issue affects the versions of the Linux kernel as shipped with Red Hat Enterprise Linux 7, its real-time kernel, Red Hat Enterprise Linux 7 for ARM 64 and Red Hat Enterprise Linux 7 for Power 9 LE. Future Linux kernel updates for the respective releases may address this issue.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
          "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
          "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
          "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
          "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-17448"
        },
        {
          "category": "external",
          "summary": "RHBZ#1525768",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1525768"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-17448",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-17448"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-17448",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-17448"
        }
      ],
      "release_date": "2017-12-03T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
          "product_ids": [
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2018:0676"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "kernel: Missing capabilities check in net/netfilter/nfnetlink_cthelper.c allows for unprivileged access to systemwide nfnl_cthelper_list structure"
    },
    {
      "cve": "CVE-2017-17449",
      "cwe": {
        "id": "CWE-284",
        "name": "Improper Access Control"
      },
      "discovery_date": "2017-12-14T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1525762"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The __netlink_deliver_tap_skb function in net/netlink/af_netlink.c in the Linux kernel, through 4.14.4, does not restrict observations of Netlink messages to a single net namespace, when CONFIG_NLMON is enabled. This allows local users to obtain sensitive information by leveraging the CAP_NET_ADMIN capability to sniff an nlmon interface for all Netlink activity on the system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: Missing namespace check in net/netlink/af_netlink.c allows for network monitors to observe systemwide activity",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue does not affect the Linux kernel packages as shipped with Red Hat Enterprise Linux 5 and 6, as a code with the flaw is not present or is not built in the products listed.\n\nThis issue affects the versions of the Linux kernel as shipped with Red Hat Enterprise Linux 7, its real-time kernel, Red Hat Enterprise MRG 2, Red Hat Enterprise Linux 7 for ARM 64 and Red Hat Enterprise Linux 7 for Power 9 LE. Future Linux kernel updates for the respective releases may address this issue.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
          "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
          "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
          "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
          "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-17449"
        },
        {
          "category": "external",
          "summary": "RHBZ#1525762",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1525762"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-17449",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-17449"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-17449",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-17449"
        }
      ],
      "release_date": "2017-12-05T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
          "product_ids": [
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2018:0676"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "kernel: Missing namespace check in net/netlink/af_netlink.c allows for network monitors to observe systemwide activity"
    },
    {
      "cve": "CVE-2017-17558",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "discovery_date": "2017-12-12T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1525474"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The usb_destroy_configuration() function, in \u0027drivers/usb/core/config.c\u0027 in the USB core subsystem, in the Linux kernel through 4.14.5 does not consider the maximum number of configurations and interfaces before attempting to release resources. This allows local users to cause a denial of service, due to out-of-bounds write access, or possibly have unspecified other impact via a crafted USB device. Due to the nature of the flaw, privilege escalation cannot be fully ruled out, although we believe it is unlikely.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: Unallocated memory access by malicious USB device via bNumInterfaces overflow",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue affects the Linux kernel packages as shipped with Red Hat Enterprise Linux 5. This is not currently planned to be addressed in future updates of the product due to its life cycle. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.\n\nThis issue affects the versions of the Linux kernel as shipped with Red Hat Enterprise Linux 6, 7, its real-time kernel, Red Hat Enterprise MRG 2, Red Hat Enterprise Linux 7 for ARM 64 and Red Hat Enterprise Linux 7 for Power 9 LE. Future Linux kernel updates for the respective releases may address this issue.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
          "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
          "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
          "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
          "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-17558"
        },
        {
          "category": "external",
          "summary": "RHBZ#1525474",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1525474"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-17558",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-17558"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-17558",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-17558"
        }
      ],
      "release_date": "2017-12-11T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
          "product_ids": [
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2018:0676"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "PHYSICAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "kernel: Unallocated memory access by malicious USB device via bNumInterfaces overflow"
    },
    {
      "cve": "CVE-2017-18017",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "discovery_date": "2018-01-03T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1531135"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service (use-after-free and memory corruption) or possibly have unspecified other impact by leveraging the presence of xt_TCPMSS in an iptables action. Due to the nature of the flaw, privilege escalation cannot be fully ruled out, although we believe it is unlikely.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: netfilter: use-after-free in tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue affects the Linux kernel packages as shipped with Red Hat Enterprise Linux 5. This is not currently planned to be addressed in future updates of the product due to its life cycle. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.\n\nThis issue affects the versions of the Linux kernel as shipped with Red Hat Enterprise Linux 6, 7, its real-time kernel, Red Hat Enterprise MRG 2, Red Hat Enterprise Linux 7 for ARM 64 and Red Hat Enterprise Linux 7 for Power 9 LE. Future Linux kernel updates for the respective releases may address this issue.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
          "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
          "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
          "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
          "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-18017"
        },
        {
          "category": "external",
          "summary": "RHBZ#1531135",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1531135"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-18017",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-18017"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-18017",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-18017"
        }
      ],
      "release_date": "2018-01-03T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
          "product_ids": [
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2018:0676"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "kernel: netfilter: use-after-free in tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c"
    },
    {
      "cve": "CVE-2017-18203",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2018-03-02T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1550811"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The Linux kernel, before version 4.14.3, is vulnerable to a denial of service in drivers/md/dm.c:dm_get_from_kobject() which can be caused by local users leveraging a race condition with __dm_destroy() during creation and removal of DM devices. Only privileged local users (with CAP_SYS_ADMIN capability) can directly perform the ioctl operations for dm device creation and removal and this would typically be outside the direct control of the unprivileged attacker.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: Race condition in drivers/md/dm.c:dm_get_from_kobject() allows local users to cause a denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue does not affect the Linux kernel packages as shipped with Red Hat Enterprise Linux 5, as the code with the flaw is not present in this product.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
          "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
          "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
          "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
          "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-18203"
        },
        {
          "category": "external",
          "summary": "RHBZ#1550811",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1550811"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-18203",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-18203"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-18203",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-18203"
        }
      ],
      "release_date": "2017-11-01T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
          "product_ids": [
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2018:0676"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "kernel: Race condition in drivers/md/dm.c:dm_get_from_kobject() allows local users to cause a denial of service"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Jan H. Sch\u00f6nherr"
          ],
          "organization": "Amazon"
        }
      ],
      "cve": "CVE-2017-1000252",
      "cwe": {
        "id": "CWE-617",
        "name": "Reachable Assertion"
      },
      "discovery_date": "2017-09-08T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1490781"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A reachable assertion failure flaw was found in the Linux kernel built with KVM virtualisation(CONFIG_KVM) support with Virtual Function I/O feature (CONFIG_VFIO) enabled. This failure could occur if a malicious guest device sent a virtual interrupt (guest IRQ) with a larger (\u003e1024) index value.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: kvm: Reachable BUG() on out-of-bounds guest IRQ",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue does not affect the versions of the kernel package as shipped with Red Hat Enterprise Linux 5, 6 and Red Hat Enterprise MRG 2.\n\nThis issue affects the version of Linux kernel as shipped with Red Hat Enterprise Linux 7. Future kernel updates for Red Hat Enterprise Linux 7 may address this issue.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
          "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
          "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
          "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
          "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-1000252"
        },
        {
          "category": "external",
          "summary": "RHBZ#1490781",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490781"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-1000252",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-1000252"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-1000252",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-1000252"
        }
      ],
      "release_date": "2017-09-15T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
          "product_ids": [
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2018:0676"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "HIGH",
            "accessVector": "ADJACENT_NETWORK",
            "authentication": "SINGLE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 4.3,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:A/AC:H/Au:S/C:N/I:N/A:C",
            "version": "2.0"
          },
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "kernel: kvm: Reachable BUG() on out-of-bounds guest IRQ"
    },
    {
      "cve": "CVE-2017-1000407",
      "cwe": {
        "id": "CWE-248",
        "name": "Uncaught Exception"
      },
      "discovery_date": "2017-11-29T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1520328"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Linux kernel Virtualization Module (CONFIG_KVM) for the Intel processor family (CONFIG_KVM_INTEL) is vulnerable to a DoS issue. It could occur if a guest was to flood the I/O port 0x80 with write requests. A guest user could use this flaw to crash the host kernel resulting in DoS.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Kernel: KVM: DoS via write flood to I/O port 0x80",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
          "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
          "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
          "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
          "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-1000407"
        },
        {
          "category": "external",
          "summary": "RHBZ#1520328",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1520328"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-1000407",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-1000407"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-1000407",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-1000407"
        }
      ],
      "release_date": "2017-12-01T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
          "product_ids": [
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2018:0676"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "HIGH",
            "accessVector": "ADJACENT_NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 4.6,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:A/AC:H/Au:N/C:N/I:N/A:C",
            "version": "2.0"
          },
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Kernel: KVM: DoS via write flood to I/O port 0x80"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Armis Labs"
          ]
        }
      ],
      "cve": "CVE-2017-1000410",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "discovery_date": "2017-11-30T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1519160"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the processing of incoming L2CAP bluetooth commands. Uninitialized stack variables can be sent to an attacker leaking data in kernel address space.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: Stack information leak in the EFS element",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue does not affect the Linux kernel packages as shipped with Red Hat\nEnterprise Linux 5.\n\nThis issue affects the versions of the Linux kernel as shipped with Red Hat Enterprise Linux 6, 7, its real-time kernel, Red Hat Enterprise MRG 2, Red Hat Enterprise Linux 7 for ARM 64 and Red Hat Enterprise Linux 7 for Power 9 LE. Future Linux kernel updates for the respective releases may address this issue.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
          "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
          "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
          "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
          "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-1000410"
        },
        {
          "category": "external",
          "summary": "RHBZ#1519160",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1519160"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-1000410",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-1000410"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-1000410",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-1000410"
        }
      ],
      "release_date": "2017-12-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
          "product_ids": [
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2018:0676"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "kernel: Stack information leak in the EFS element"
    },
    {
      "cve": "CVE-2018-5750",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "discovery_date": "2018-01-26T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1539706"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The acpi_smbus_hc_add function in drivers/acpi/sbshc.c in the Linux kernel, through 4.14.15, allows local users to obtain sensitive address information by reading dmesg data from an SBS HC printk call.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: Kernel address information leak in drivers/acpi/sbshc.c:acpi_smbus_hc_add() function potentially allowing KASLR bypass",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue does not affect the Linux kernel packages as shipped with Red Hat Enterprise Linux 5, 6, and Red Hat Enterprise MRG 2, as KASLR feature is not present or enabled in these products.\n\nThis issue affects the Linux kernel packages as shipped with Red Hat Enterprise Linux 7, its real-time kernel, Red Hat Enterprise Linux 7 for ARM 64 and Red Hat Enterprise Linux 7 for Power 9 LE. Future Linux kernel updates for the respective releases may address this issue.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
          "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
          "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
          "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
          "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-5750"
        },
        {
          "category": "external",
          "summary": "RHBZ#1539706",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1539706"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-5750",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-5750"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-5750",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-5750"
        }
      ],
      "release_date": "2017-12-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
          "product_ids": [
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2018:0676"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "kernel: Kernel address information leak in drivers/acpi/sbshc.c:acpi_smbus_hc_add() function potentially allowing KASLR bypass"
    },
    {
      "cve": "CVE-2018-6927",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2018-02-13T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1544612"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The futex_requeue function in kernel/futex.c in the Linux kernel, before 4.14.15, might allow attackers to cause a denial of service (integer overflow) or possibly have unspecified other impacts by triggering a negative wake or requeue value. Due to the nature of the flaw, privilege escalation cannot be fully ruled out, although we believe it is unlikely.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: Integer overflow in futex.c:futux_requeue can lead to denial of service or unspecified impact",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue affects the Linux kernel packages as shipped with Red Hat Enterprise Linux 5. This is not currently planned to be addressed in future updates of the product due to its life cycle. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.\n\nThis issue affects the versions of the Linux kernel as shipped with Red Hat Enterprise Linux 6, 7, its real-time kernel, Red Hat Enterprise MRG 2, Red Hat Enterprise Linux 7 for ARM 64 and Red Hat Enterprise Linux 7 for Power 9 LE. Future Linux kernel updates for the respective releases may address this issue.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
          "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
          "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
          "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
          "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-6927"
        },
        {
          "category": "external",
          "summary": "RHBZ#1544612",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1544612"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-6927",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-6927"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-6927",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-6927"
        }
      ],
      "release_date": "2018-02-12T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
          "product_ids": [
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2018:0676"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "kernel: Integer overflow in futex.c:futux_requeue can lead to denial of service or unspecified impact"
    },
    {
      "cve": "CVE-2018-1000004",
      "cwe": {
        "id": "CWE-362",
        "name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
      },
      "discovery_date": "2018-01-17T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1535315"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "In the Linux kernel versions 4.12, 3.10, 2.6, and possibly earlier, a race condition vulnerability exists in the sound system allowing for a potential deadlock and memory corruption due to use-after-free condition and thus denial of service. Due to the nature of the flaw, privilege escalation cannot be fully ruled out, although we believe it is unlikely.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: Race condition in sound system can lead to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue affects the version of Linux kernel package as shipped with Red Hat Enterprise Linux 5. This is not currently planned to be addressed in future updates of the product due to its life cycle. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.\n\nThis issue affects the versions of the Linux kernel as shipped with Red Hat Enterprise Linux 6, 7, its real-time kernel, Red Hat Enterprise MRG 2, Red Hat Enterprise Linux 7 for ARM 64 and Red Hat Enterprise Linux 7 for Power 9 LE. Future Linux kernel updates for the respective releases may address this issue.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
          "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
          "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
          "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
          "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
          "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-1000004"
        },
        {
          "category": "external",
          "summary": "RHBZ#1535315",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1535315"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-1000004",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-1000004"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1000004",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1000004"
        }
      ],
      "release_date": "2018-01-10T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
          "product_ids": [
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2018:0676"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-NFV-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-NFV-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-NFV-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.src",
            "7Server-RT-7.5:kernel-rt-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debug-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-debuginfo-common-x86_64-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-doc-0:3.10.0-862.rt56.804.el7.noarch",
            "7Server-RT-7.5:kernel-rt-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-devel-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-0:3.10.0-862.rt56.804.el7.x86_64",
            "7Server-RT-7.5:kernel-rt-trace-kvm-debuginfo-0:3.10.0-862.rt56.804.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "kernel: Race condition in sound system can lead to denial of service"
    }
  ]
}

cve-2017-15129

Vulnerability from cvelistv5

Published

2018-01-09 19:00

Modified

2024-08-05 19:50

Severity

Summary

A use-after-free vulnerability was found in network namespaces code affecting the Linux kernel before 4.14.11. The function get_net_ns_by_id() in net/core/net_namespace.c does not check for the net::count value after it has found a peer network in netns_ids idr, which could lead to double free and memory corruption. This vulnerability could allow an unprivileged local user to induce kernel memory corruption on the system, leading to a crash. Due to the nature of the flaw, privilege escalation cannot be fully ruled out, although it is thought to be unlikely.

References

URL	Tags
https://usn.ubuntu.com/3617-1/	vendor-advisory, x_refsource_UBUNTU
https://usn.ubuntu.com/3619-2/	vendor-advisory, x_refsource_UBUNTU
https://usn.ubuntu.com/3617-3/	vendor-advisory, x_refsource_UBUNTU
https://marc.info/?l=linux-netdev&m=151370451121029&w=2	x_refsource_MISC
https://marc.info/?t=151370468900001&r=1&w=2	x_refsource_MISC
https://usn.ubuntu.com/3632-1/	vendor-advisory, x_refsource_UBUNTU
https://bugzilla.redhat.com/show_bug.cgi?id=1531174	x_refsource_MISC
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.11	x_refsource_MISC
https://github.com/torvalds/linux/commit/21b5944350052d2583e82dd59b19a9ba94a007f0	x_refsource_MISC
https://access.redhat.com/errata/RHSA-2018:1062	vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:0654	vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2017-15129	x_refsource_MISC
http://www.securityfocus.com/bid/102485	vdb-entry, x_refsource_BID
http://seclists.org/oss-sec/2018/q1/7	x_refsource_MISC
https://access.redhat.com/errata/RHSA-2018:0676	vendor-advisory, x_refsource_REDHAT
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=21b5944350052d2583e82dd59b19a9ba94a007f0	x_refsource_MISC
https://usn.ubuntu.com/3617-2/	vendor-advisory, x_refsource_UBUNTU
https://usn.ubuntu.com/3619-1/	vendor-advisory, x_refsource_UBUNTU
https://access.redhat.com/errata/RHSA-2019:1946	vendor-advisory, x_refsource_REDHAT

Impacted products

Vendor	Product
n/a	Linux kernel v4.0-rc1 through v4.15-rc5

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T19:50:15.698Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "USN-3617-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3617-1/"
          },
          {
            "name": "USN-3619-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3619-2/"
          },
          {
            "name": "USN-3617-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3617-3/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://marc.info/?l=linux-netdev\u0026m=151370451121029\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://marc.info/?t=151370468900001\u0026r=1\u0026w=2"
          },
          {
            "name": "USN-3632-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3632-1/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1531174"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.11"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/21b5944350052d2583e82dd59b19a9ba94a007f0"
          },
          {
            "name": "RHSA-2018:1062",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1062"
          },
          {
            "name": "RHSA-2018:0654",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0654"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2017-15129"
          },
          {
            "name": "102485",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/102485"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://seclists.org/oss-sec/2018/q1/7"
          },
          {
            "name": "RHSA-2018:0676",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0676"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=21b5944350052d2583e82dd59b19a9ba94a007f0"
          },
          {
            "name": "USN-3617-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3617-2/"
          },
          {
            "name": "USN-3619-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3619-1/"
          },
          {
            "name": "RHSA-2019:1946",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1946"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Linux kernel v4.0-rc1 through v4.15-rc5",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Linux kernel v4.0-rc1 through v4.15-rc5"
            }
          ]
        }
      ],
      "datePublic": "2018-01-09T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A use-after-free vulnerability was found in network namespaces code affecting the Linux kernel before 4.14.11. The function get_net_ns_by_id() in net/core/net_namespace.c does not check for the net::count value after it has found a peer network in netns_ids idr, which could lead to double free and memory corruption. This vulnerability could allow an unprivileged local user to induce kernel memory corruption on the system, leading to a crash. Due to the nature of the flaw, privilege escalation cannot be fully ruled out, although it is thought to be unlikely."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-362",
              "description": "CWE-362",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-07-30T12:06:06",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "USN-3617-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3617-1/"
        },
        {
          "name": "USN-3619-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3619-2/"
        },
        {
          "name": "USN-3617-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3617-3/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://marc.info/?l=linux-netdev\u0026m=151370451121029\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://marc.info/?t=151370468900001\u0026r=1\u0026w=2"
        },
        {
          "name": "USN-3632-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3632-1/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1531174"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.11"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/torvalds/linux/commit/21b5944350052d2583e82dd59b19a9ba94a007f0"
        },
        {
          "name": "RHSA-2018:1062",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1062"
        },
        {
          "name": "RHSA-2018:0654",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0654"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2017-15129"
        },
        {
          "name": "102485",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/102485"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://seclists.org/oss-sec/2018/q1/7"
        },
        {
          "name": "RHSA-2018:0676",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0676"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=21b5944350052d2583e82dd59b19a9ba94a007f0"
        },
        {
          "name": "USN-3617-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3617-2/"
        },
        {
          "name": "USN-3619-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3619-1/"
        },
        {
          "name": "RHSA-2019:1946",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1946"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2017-15129",
    "datePublished": "2018-01-09T19:00:00",
    "dateReserved": "2017-10-08T00:00:00",
    "dateUpdated": "2024-08-05T19:50:15.698Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2017-1000410

Vulnerability from cvelistv5

Published

2017-12-07 19:00

Modified

2024-08-05 22:00

Severity

Summary

The Linux kernel version 3.3-rc1 and later is affected by a vulnerability lies in the processing of incoming L2CAP commands - ConfigRequest, and ConfigResponse messages. This info leak is a result of uninitialized stack variables that may be returned to an attacker in their uninitialized state. By manipulating the code flows that precede the handling of these configuration messages, an attacker can also gain some control over which data will be held in the uninitialized stack variables. This can allow him to bypass KASLR, and stack canaries protection - as both pointers and stack canaries may be leaked in this manner. Combining this vulnerability (for example) with the previously disclosed RCE vulnerability in L2CAP configuration parsing (CVE-2017-1000251) may allow an attacker to exploit the RCE against kernels which were built with the above mitigations. These are the specifics of this vulnerability: In the function l2cap_parse_conf_rsp and in the function l2cap_parse_conf_req the following variable is declared without initialization: struct l2cap_conf_efs efs; In addition, when parsing input configuration parameters in both of these functions, the switch case for handling EFS elements may skip the memcpy call that will write to the efs variable: ... case L2CAP_CONF_EFS: if (olen == sizeof(efs)) memcpy(&efs, (void *)val, olen); ... The olen in the above if is attacker controlled, and regardless of that if, in both of these functions the efs variable would eventually be added to the outgoing configuration request that is being built: l2cap_add_conf_opt(&ptr, L2CAP_CONF_EFS, sizeof(efs), (unsigned long) &efs); So by sending a configuration request, or response, that contains an L2CAP_CONF_EFS element, but with an element length that is not sizeof(efs) - the memcpy to the uninitialized efs variable can be avoided, and the uninitialized variable would be returned to the attacker (16 bytes).

References

URL	Tags
http://seclists.org/oss-sec/2017/q4/357	mailing-list, x_refsource_MLIST
https://www.debian.org/security/2018/dsa-4082	vendor-advisory, x_refsource_DEBIAN
https://access.redhat.com/errata/RHSA-2018:1062	vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:0654	vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:1319	vendor-advisory, x_refsource_REDHAT
https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0	x_refsource_CONFIRM
https://access.redhat.com/errata/RHSA-2018:0676	vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:1170	vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:1130	vendor-advisory, x_refsource_REDHAT
https://www.debian.org/security/2017/dsa-4073	vendor-advisory, x_refsource_DEBIAN
http://www.securityfocus.com/bid/102101	vdb-entry, x_refsource_BID
https://usn.ubuntu.com/3933-2/	vendor-advisory, x_refsource_UBUNTU
https://usn.ubuntu.com/3933-1/	vendor-advisory, x_refsource_UBUNTU

Impacted products

Vendor	Product
n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T22:00:41.363Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[oss-security] 20171206 Info Leak in the Linux Kernel via Bluetooth",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://seclists.org/oss-sec/2017/q4/357"
          },
          {
            "name": "DSA-4082",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4082"
          },
          {
            "name": "RHSA-2018:1062",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1062"
          },
          {
            "name": "RHSA-2018:0654",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0654"
          },
          {
            "name": "RHSA-2018:1319",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1319"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0"
          },
          {
            "name": "RHSA-2018:0676",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0676"
          },
          {
            "name": "RHSA-2018:1170",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1170"
          },
          {
            "name": "RHSA-2018:1130",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1130"
          },
          {
            "name": "DSA-4073",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-4073"
          },
          {
            "name": "102101",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/102101"
          },
          {
            "name": "USN-3933-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3933-2/"
          },
          {
            "name": "USN-3933-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3933-1/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "dateAssigned": "2017-12-05T00:00:00",
      "datePublic": "2017-12-07T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The Linux kernel version 3.3-rc1 and later is affected by a vulnerability lies in the processing of incoming L2CAP commands - ConfigRequest, and ConfigResponse messages. This info leak is a result of uninitialized stack variables that may be returned to an attacker in their uninitialized state. By manipulating the code flows that precede the handling of these configuration messages, an attacker can also gain some control over which data will be held in the uninitialized stack variables. This can allow him to bypass KASLR, and stack canaries protection - as both pointers and stack canaries may be leaked in this manner. Combining this vulnerability (for example) with the previously disclosed RCE vulnerability in L2CAP configuration parsing (CVE-2017-1000251) may allow an attacker to exploit the RCE against kernels which were built with the above mitigations. These are the specifics of this vulnerability: In the function l2cap_parse_conf_rsp and in the function l2cap_parse_conf_req the following variable is declared without initialization: struct l2cap_conf_efs efs; In addition, when parsing input configuration parameters in both of these functions, the switch case for handling EFS elements may skip the memcpy call that will write to the efs variable: ... case L2CAP_CONF_EFS: if (olen == sizeof(efs)) memcpy(\u0026efs, (void *)val, olen); ... The olen in the above if is attacker controlled, and regardless of that if, in both of these functions the efs variable would eventually be added to the outgoing configuration request that is being built: l2cap_add_conf_opt(\u0026ptr, L2CAP_CONF_EFS, sizeof(efs), (unsigned long) \u0026efs); So by sending a configuration request, or response, that contains an L2CAP_CONF_EFS element, but with an element length that is not sizeof(efs) - the memcpy to the uninitialized efs variable can be avoided, and the uninitialized variable would be returned to the attacker (16 bytes)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-04-08T19:06:07",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "[oss-security] 20171206 Info Leak in the Linux Kernel via Bluetooth",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://seclists.org/oss-sec/2017/q4/357"
        },
        {
          "name": "DSA-4082",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4082"
        },
        {
          "name": "RHSA-2018:1062",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1062"
        },
        {
          "name": "RHSA-2018:0654",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0654"
        },
        {
          "name": "RHSA-2018:1319",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1319"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0"
        },
        {
          "name": "RHSA-2018:0676",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0676"
        },
        {
          "name": "RHSA-2018:1170",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1170"
        },
        {
          "name": "RHSA-2018:1130",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1130"
        },
        {
          "name": "DSA-4073",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-4073"
        },
        {
          "name": "102101",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/102101"
        },
        {
          "name": "USN-3933-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3933-2/"
        },
        {
          "name": "USN-3933-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3933-1/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "DATE_ASSIGNED": "2017-12-05",
          "ID": "CVE-2017-1000410",
          "REQUESTER": "ben@armis.com",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The Linux kernel version 3.3-rc1 and later is affected by a vulnerability lies in the processing of incoming L2CAP commands - ConfigRequest, and ConfigResponse messages. This info leak is a result of uninitialized stack variables that may be returned to an attacker in their uninitialized state. By manipulating the code flows that precede the handling of these configuration messages, an attacker can also gain some control over which data will be held in the uninitialized stack variables. This can allow him to bypass KASLR, and stack canaries protection - as both pointers and stack canaries may be leaked in this manner. Combining this vulnerability (for example) with the previously disclosed RCE vulnerability in L2CAP configuration parsing (CVE-2017-1000251) may allow an attacker to exploit the RCE against kernels which were built with the above mitigations. These are the specifics of this vulnerability: In the function l2cap_parse_conf_rsp and in the function l2cap_parse_conf_req the following variable is declared without initialization: struct l2cap_conf_efs efs; In addition, when parsing input configuration parameters in both of these functions, the switch case for handling EFS elements may skip the memcpy call that will write to the efs variable: ... case L2CAP_CONF_EFS: if (olen == sizeof(efs)) memcpy(\u0026efs, (void *)val, olen); ... The olen in the above if is attacker controlled, and regardless of that if, in both of these functions the efs variable would eventually be added to the outgoing configuration request that is being built: l2cap_add_conf_opt(\u0026ptr, L2CAP_CONF_EFS, sizeof(efs), (unsigned long) \u0026efs); So by sending a configuration request, or response, that contains an L2CAP_CONF_EFS element, but with an element length that is not sizeof(efs) - the memcpy to the uninitialized efs variable can be avoided, and the uninitialized variable would be returned to the attacker (16 bytes)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "[oss-security] 20171206 Info Leak in the Linux Kernel via Bluetooth",
              "refsource": "MLIST",
              "url": "http://seclists.org/oss-sec/2017/q4/357"
            },
            {
              "name": "DSA-4082",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4082"
            },
            {
              "name": "RHSA-2018:1062",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1062"
            },
            {
              "name": "RHSA-2018:0654",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0654"
            },
            {
              "name": "RHSA-2018:1319",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1319"
            },
            {
              "name": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0",
              "refsource": "CONFIRM",
              "url": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0"
            },
            {
              "name": "RHSA-2018:0676",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0676"
            },
            {
              "name": "RHSA-2018:1170",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1170"
            },
            {
              "name": "RHSA-2018:1130",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1130"
            },
            {
              "name": "DSA-4073",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-4073"
            },
            {
              "name": "102101",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/102101"
            },
            {
              "name": "USN-3933-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3933-2/"
            },
            {
              "name": "USN-3933-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3933-1/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2017-1000410",
    "datePublished": "2017-12-07T19:00:00",
    "dateReserved": "2017-12-07T00:00:00",
    "dateUpdated": "2024-08-05T22:00:41.363Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2017-1000407

Vulnerability from cvelistv5

Published

2017-12-11 21:00

Modified

2024-08-05 22:00

Severity

Summary

The Linux Kernel 2.6.32 and later are affected by a denial of service, by flooding the diagnostic port 0x80 an exception can be triggered leading to a kernel panic.

References

URL	Tags
https://usn.ubuntu.com/3617-1/	vendor-advisory, x_refsource_UBUNTU
https://usn.ubuntu.com/3619-2/	vendor-advisory, x_refsource_UBUNTU
https://www.debian.org/security/2018/dsa-4082	vendor-advisory, x_refsource_DEBIAN
https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html	mailing-list, x_refsource_MLIST
http://www.openwall.com/lists/oss-security/2017/12/04/2	mailing-list, x_refsource_MLIST
http://www.securityfocus.com/bid/102038	vdb-entry, x_refsource_BID
https://usn.ubuntu.com/3583-2/	vendor-advisory, x_refsource_UBUNTU
https://usn.ubuntu.com/3632-1/	vendor-advisory, x_refsource_UBUNTU
https://access.redhat.com/security/cve/cve-2017-1000407	x_refsource_CONFIRM
https://access.redhat.com/errata/RHSA-2018:1062	vendor-advisory, x_refsource_REDHAT
https://usn.ubuntu.com/3583-1/	vendor-advisory, x_refsource_UBUNTU
https://access.redhat.com/errata/RHSA-2018:0676	vendor-advisory, x_refsource_REDHAT
https://www.debian.org/security/2017/dsa-4073	vendor-advisory, x_refsource_DEBIAN
https://usn.ubuntu.com/3617-2/	vendor-advisory, x_refsource_UBUNTU
https://www.spinics.net/lists/kvm/msg159809.html	mailing-list, x_refsource_MLIST
https://usn.ubuntu.com/3619-1/	vendor-advisory, x_refsource_UBUNTU
https://access.redhat.com/errata/RHSA-2019:1170	vendor-advisory, x_refsource_REDHAT

Impacted products

Vendor	Product
n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T22:00:40.987Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "USN-3617-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3617-1/"
          },
          {
            "name": "USN-3619-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3619-2/"
          },
          {
            "name": "DSA-4082",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4082"
          },
          {
            "name": "[debian-lts-announce] 20171210 [SECURITY] [DLA 1200-1] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html"
          },
          {
            "name": "[oss-security] 20171204 CVE-2017-1000407 Kernel: KVM: DoS via write flood to I/O port 0x80",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2017/12/04/2"
          },
          {
            "name": "102038",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/102038"
          },
          {
            "name": "USN-3583-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3583-2/"
          },
          {
            "name": "USN-3632-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3632-1/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/security/cve/cve-2017-1000407"
          },
          {
            "name": "RHSA-2018:1062",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1062"
          },
          {
            "name": "USN-3583-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3583-1/"
          },
          {
            "name": "RHSA-2018:0676",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0676"
          },
          {
            "name": "DSA-4073",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-4073"
          },
          {
            "name": "USN-3617-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3617-2/"
          },
          {
            "name": "[kvm] 20171201 [PATCH 1/2] KVM: VMX: remove I/O port 0x80 bypass on Intel hosts",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://www.spinics.net/lists/kvm/msg159809.html"
          },
          {
            "name": "USN-3619-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3619-1/"
          },
          {
            "name": "RHSA-2019:1170",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1170"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-12-01T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The Linux Kernel 2.6.32 and later are affected by a denial of service, by flooding the diagnostic port 0x80 an exception can be triggered leading to a kernel panic."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-05-14T21:06:12",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "USN-3617-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3617-1/"
        },
        {
          "name": "USN-3619-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3619-2/"
        },
        {
          "name": "DSA-4082",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4082"
        },
        {
          "name": "[debian-lts-announce] 20171210 [SECURITY] [DLA 1200-1] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html"
        },
        {
          "name": "[oss-security] 20171204 CVE-2017-1000407 Kernel: KVM: DoS via write flood to I/O port 0x80",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2017/12/04/2"
        },
        {
          "name": "102038",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/102038"
        },
        {
          "name": "USN-3583-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3583-2/"
        },
        {
          "name": "USN-3632-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3632-1/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://access.redhat.com/security/cve/cve-2017-1000407"
        },
        {
          "name": "RHSA-2018:1062",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1062"
        },
        {
          "name": "USN-3583-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3583-1/"
        },
        {
          "name": "RHSA-2018:0676",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0676"
        },
        {
          "name": "DSA-4073",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-4073"
        },
        {
          "name": "USN-3617-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3617-2/"
        },
        {
          "name": "[kvm] 20171201 [PATCH 1/2] KVM: VMX: remove I/O port 0x80 bypass on Intel hosts",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://www.spinics.net/lists/kvm/msg159809.html"
        },
        {
          "name": "USN-3619-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3619-1/"
        },
        {
          "name": "RHSA-2019:1170",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1170"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-1000407",
          "REQUESTER": "ppandit@redhat.com",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The Linux Kernel 2.6.32 and later are affected by a denial of service, by flooding the diagnostic port 0x80 an exception can be triggered leading to a kernel panic."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "USN-3617-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3617-1/"
            },
            {
              "name": "USN-3619-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3619-2/"
            },
            {
              "name": "DSA-4082",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4082"
            },
            {
              "name": "[debian-lts-announce] 20171210 [SECURITY] [DLA 1200-1] linux security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html"
            },
            {
              "name": "[oss-security] 20171204 CVE-2017-1000407 Kernel: KVM: DoS via write flood to I/O port 0x80",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2017/12/04/2"
            },
            {
              "name": "102038",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/102038"
            },
            {
              "name": "USN-3583-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3583-2/"
            },
            {
              "name": "USN-3632-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3632-1/"
            },
            {
              "name": "https://access.redhat.com/security/cve/cve-2017-1000407",
              "refsource": "CONFIRM",
              "url": "https://access.redhat.com/security/cve/cve-2017-1000407"
            },
            {
              "name": "RHSA-2018:1062",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1062"
            },
            {
              "name": "USN-3583-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3583-1/"
            },
            {
              "name": "RHSA-2018:0676",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0676"
            },
            {
              "name": "DSA-4073",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-4073"
            },
            {
              "name": "USN-3617-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3617-2/"
            },
            {
              "name": "[kvm] 20171201 [PATCH 1/2] KVM: VMX: remove I/O port 0x80 bypass on Intel hosts",
              "refsource": "MLIST",
              "url": "https://www.spinics.net/lists/kvm/msg159809.html"
            },
            {
              "name": "USN-3619-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3619-1/"
            },
            {
              "name": "RHSA-2019:1170",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1170"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2017-1000407",
    "datePublished": "2017-12-11T21:00:00",
    "dateReserved": "2017-12-05T00:00:00",
    "dateUpdated": "2024-08-05T22:00:40.987Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2017-15126

Vulnerability from cvelistv5

Published

2018-01-14 06:00

Modified

2024-08-05 19:50

Severity

Summary

A use-after-free flaw was found in fs/userfaultfd.c in the Linux kernel before 4.13.6. The issue is related to the handling of fork failure when dealing with event messages. Failure to fork correctly can lead to a situation where a fork event will be removed from an already freed list of events with userfaultfd_ctx_put().

References

URL	Tags
http://www.securityfocus.com/bid/102516	vdb-entry, x_refsource_BID
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=384632e67e0829deb8015ee6ad916b180049d252	x_refsource_MISC
https://bugzilla.redhat.com/show_bug.cgi?id=1523481	x_refsource_MISC
https://access.redhat.com/errata/RHSA-2018:1062	vendor-advisory, x_refsource_REDHAT
https://github.com/torvalds/linux/commit/384632e67e0829deb8015ee6ad916b180049d252	x_refsource_MISC
https://access.redhat.com/errata/RHSA-2018:0676	vendor-advisory, x_refsource_REDHAT
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.6	x_refsource_MISC
https://access.redhat.com/security/cve/CVE-2017-15126	x_refsource_MISC

Impacted products

Vendor	Product
n/a	Linux Kernel before 4.13.6

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T19:50:16.412Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "102516",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/102516"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=384632e67e0829deb8015ee6ad916b180049d252"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1523481"
          },
          {
            "name": "RHSA-2018:1062",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1062"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/384632e67e0829deb8015ee6ad916b180049d252"
          },
          {
            "name": "RHSA-2018:0676",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0676"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.6"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2017-15126"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Linux Kernel before 4.13.6",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Linux Kernel before 4.13.6"
            }
          ]
        }
      ],
      "datePublic": "2018-01-14T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A use-after-free flaw was found in fs/userfaultfd.c in the Linux kernel before 4.13.6. The issue is related to the handling of fork failure when dealing with event messages. Failure to fork correctly can lead to a situation where a fork event will be removed from an already freed list of events with userfaultfd_ctx_put()."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-119",
              "description": "CWE-119",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-05-06T09:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "102516",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/102516"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=384632e67e0829deb8015ee6ad916b180049d252"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1523481"
        },
        {
          "name": "RHSA-2018:1062",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1062"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/torvalds/linux/commit/384632e67e0829deb8015ee6ad916b180049d252"
        },
        {
          "name": "RHSA-2018:0676",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0676"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.6"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2017-15126"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2017-15126",
    "datePublished": "2018-01-14T06:00:00",
    "dateReserved": "2017-10-08T00:00:00",
    "dateUpdated": "2024-08-05T19:50:16.412Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2017-15116

Vulnerability from cvelistv5

Published

2017-11-30 18:00

Modified

2024-08-05 19:50

Severity

Summary

The rngapi_reset function in crypto/rng.c in the Linux kernel before 4.2 allows attackers to cause a denial of service (NULL pointer dereference).

References

URL	Tags
https://bugzilla.redhat.com/show_bug.cgi?id=1485815	x_refsource_MISC
https://bugzilla.redhat.com/show_bug.cgi?id=1514609	x_refsource_MISC
https://access.redhat.com/errata/RHSA-2018:1062	vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:0676	vendor-advisory, x_refsource_REDHAT
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=94f1bb15bed84ad6c893916b7e7b9db6f1d7eec6	x_refsource_MISC
https://github.com/torvalds/linux/commit/94f1bb15bed84ad6c893916b7e7b9db6f1d7eec6	x_refsource_MISC

Impacted products

Vendor	Product
n/a	Linux kernel

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T19:50:15.583Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1485815"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1514609"
          },
          {
            "name": "RHSA-2018:1062",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1062"
          },
          {
            "name": "RHSA-2018:0676",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0676"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=94f1bb15bed84ad6c893916b7e7b9db6f1d7eec6"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/94f1bb15bed84ad6c893916b7e7b9db6f1d7eec6"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Linux kernel",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Linux kernel"
            }
          ]
        }
      ],
      "datePublic": "2017-11-30T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The rngapi_reset function in crypto/rng.c in the Linux kernel before 4.2 allows attackers to cause a denial of service (NULL pointer dereference)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "null pointer dereference",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-04-11T09:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1485815"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1514609"
        },
        {
          "name": "RHSA-2018:1062",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1062"
        },
        {
          "name": "RHSA-2018:0676",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0676"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=94f1bb15bed84ad6c893916b7e7b9db6f1d7eec6"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/torvalds/linux/commit/94f1bb15bed84ad6c893916b7e7b9db6f1d7eec6"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2017-15116",
    "datePublished": "2017-11-30T18:00:00",
    "dateReserved": "2017-10-08T00:00:00",
    "dateUpdated": "2024-08-05T19:50:15.583Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2017-7294

Vulnerability from cvelistv5

Published

2017-03-29 01:32

Modified

2024-08-05 15:56

Severity

Summary

The vmw_surface_define_ioctl function in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux kernel through 4.10.6 does not validate addition of certain levels data, which allows local users to trigger an integer overflow and out-of-bounds write, and cause a denial of service (system hang or crash) or possibly gain privileges, via a crafted ioctl call for a /dev/dri/renderD* device.

References

URL	Tags
https://bugzilla.redhat.com/show_bug.cgi?id=1436798	x_refsource_MISC
https://access.redhat.com/errata/RHSA-2018:1062	vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:0676	vendor-advisory, x_refsource_REDHAT
https://lists.freedesktop.org/archives/dri-devel/2017-March/137094.html	x_refsource_MISC
http://www.securityfocus.com/bid/97177	vdb-entry, x_refsource_BID

Impacted products

Vendor	Product
n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T15:56:36.465Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1436798"
          },
          {
            "name": "RHSA-2018:1062",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1062"
          },
          {
            "name": "RHSA-2018:0676",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0676"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://lists.freedesktop.org/archives/dri-devel/2017-March/137094.html"
          },
          {
            "name": "97177",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97177"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-03-28T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The vmw_surface_define_ioctl function in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux kernel through 4.10.6 does not validate addition of certain levels data, which allows local users to trigger an integer overflow and out-of-bounds write, and cause a denial of service (system hang or crash) or possibly gain privileges, via a crafted ioctl call for a /dev/dri/renderD* device."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-04-11T09:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1436798"
        },
        {
          "name": "RHSA-2018:1062",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1062"
        },
        {
          "name": "RHSA-2018:0676",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0676"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://lists.freedesktop.org/archives/dri-devel/2017-March/137094.html"
        },
        {
          "name": "97177",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97177"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-7294",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The vmw_surface_define_ioctl function in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux kernel through 4.10.6 does not validate addition of certain levels data, which allows local users to trigger an integer overflow and out-of-bounds write, and cause a denial of service (system hang or crash) or possibly gain privileges, via a crafted ioctl call for a /dev/dri/renderD* device."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1436798",
              "refsource": "MISC",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1436798"
            },
            {
              "name": "RHSA-2018:1062",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1062"
            },
            {
              "name": "RHSA-2018:0676",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0676"
            },
            {
              "name": "https://lists.freedesktop.org/archives/dri-devel/2017-March/137094.html",
              "refsource": "MISC",
              "url": "https://lists.freedesktop.org/archives/dri-devel/2017-March/137094.html"
            },
            {
              "name": "97177",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/97177"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2017-7294",
    "datePublished": "2017-03-29T01:32:00",
    "dateReserved": "2017-03-28T00:00:00",
    "dateUpdated": "2024-08-05T15:56:36.465Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2017-15265

Vulnerability from cvelistv5

Published

2017-10-16 18:00

Modified

2024-08-05 19:50

Severity

Summary

Race condition in the ALSA subsystem in the Linux kernel before 4.13.8 allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted /dev/snd/seq ioctl calls, related to sound/core/seq/seq_clientmgr.c and sound/core/seq/seq_ports.c.

References

URL	Tags
http://www.openwall.com/lists/oss-security/2017/10/11/3	mailing-list, x_refsource_MLIST
http://www.securityfocus.com/bid/101288	vdb-entry, x_refsource_BID
https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html	mailing-list, x_refsource_MLIST
https://access.redhat.com/errata/RHSA-2018:2390	vendor-advisory, x_refsource_REDHAT
http://www.securitytracker.com/id/1039561	vdb-entry, x_refsource_SECTRACK
https://access.redhat.com/errata/RHSA-2018:1062	vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:3823	vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:0676	vendor-advisory, x_refsource_REDHAT
http://mailman.alsa-project.org/pipermail/alsa-devel/2017-October/126292.html	mailing-list, x_refsource_MLIST
https://access.redhat.com/errata/RHSA-2018:1170	vendor-advisory, x_refsource_REDHAT
https://usn.ubuntu.com/3698-1/	vendor-advisory, x_refsource_UBUNTU
https://access.redhat.com/errata/RHSA-2018:1130	vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:3822	vendor-advisory, x_refsource_REDHAT
https://usn.ubuntu.com/3698-2/	vendor-advisory, x_refsource_UBUNTU
https://www.oracle.com/security-alerts/cpujul2020.html	x_refsource_MISC
https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html	x_refsource_MISC
https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0	x_refsource_CONFIRM
https://github.com/torvalds/linux/commit/71105998845fb012937332fe2e806d443c09e026	x_refsource_CONFIRM
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=71105998845fb012937332fe2e806d443c09e026	x_refsource_CONFIRM
http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.8	x_refsource_CONFIRM
https://bugzilla.suse.com/show_bug.cgi?id=1062520	x_refsource_CONFIRM
https://source.android.com/security/bulletin/2018-02-01	x_refsource_CONFIRM

Impacted products

Vendor	Product
n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T19:50:16.603Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[oss-security] 20171011 Linux kernel: alsa: use-after-free in /dev/snd/seq CVE-2017-15265",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2017/10/11/3"
          },
          {
            "name": "101288",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/101288"
          },
          {
            "name": "[debian-lts-announce] 20171210 [SECURITY] [DLA 1200-1] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html"
          },
          {
            "name": "RHSA-2018:2390",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2390"
          },
          {
            "name": "1039561",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1039561"
          },
          {
            "name": "RHSA-2018:1062",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1062"
          },
          {
            "name": "RHSA-2018:3823",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3823"
          },
          {
            "name": "RHSA-2018:0676",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0676"
          },
          {
            "name": "[alsa-devel] 20171011 [PATCH] ALSA: seq: Fix use-after-free at creating a port",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://mailman.alsa-project.org/pipermail/alsa-devel/2017-October/126292.html"
          },
          {
            "name": "RHSA-2018:1170",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1170"
          },
          {
            "name": "USN-3698-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3698-1/"
          },
          {
            "name": "RHSA-2018:1130",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1130"
          },
          {
            "name": "RHSA-2018:3822",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3822"
          },
          {
            "name": "USN-3698-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3698-2/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpujul2020.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/71105998845fb012937332fe2e806d443c09e026"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=71105998845fb012937332fe2e806d443c09e026"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.8"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.suse.com/show_bug.cgi?id=1062520"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://source.android.com/security/bulletin/2018-02-01"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-10-11T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Race condition in the ALSA subsystem in the Linux kernel before 4.13.8 allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted /dev/snd/seq ioctl calls, related to sound/core/seq/seq_clientmgr.c and sound/core/seq/seq_ports.c."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-07-15T02:22:55",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "[oss-security] 20171011 Linux kernel: alsa: use-after-free in /dev/snd/seq CVE-2017-15265",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2017/10/11/3"
        },
        {
          "name": "101288",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/101288"
        },
        {
          "name": "[debian-lts-announce] 20171210 [SECURITY] [DLA 1200-1] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html"
        },
        {
          "name": "RHSA-2018:2390",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2390"
        },
        {
          "name": "1039561",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1039561"
        },
        {
          "name": "RHSA-2018:1062",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1062"
        },
        {
          "name": "RHSA-2018:3823",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3823"
        },
        {
          "name": "RHSA-2018:0676",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0676"
        },
        {
          "name": "[alsa-devel] 20171011 [PATCH] ALSA: seq: Fix use-after-free at creating a port",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://mailman.alsa-project.org/pipermail/alsa-devel/2017-October/126292.html"
        },
        {
          "name": "RHSA-2018:1170",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1170"
        },
        {
          "name": "USN-3698-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3698-1/"
        },
        {
          "name": "RHSA-2018:1130",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1130"
        },
        {
          "name": "RHSA-2018:3822",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3822"
        },
        {
          "name": "USN-3698-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3698-2/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/security-alerts/cpujul2020.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/torvalds/linux/commit/71105998845fb012937332fe2e806d443c09e026"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=71105998845fb012937332fe2e806d443c09e026"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.8"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.suse.com/show_bug.cgi?id=1062520"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://source.android.com/security/bulletin/2018-02-01"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-15265",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Race condition in the ALSA subsystem in the Linux kernel before 4.13.8 allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted /dev/snd/seq ioctl calls, related to sound/core/seq/seq_clientmgr.c and sound/core/seq/seq_ports.c."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "[oss-security] 20171011 Linux kernel: alsa: use-after-free in /dev/snd/seq CVE-2017-15265",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2017/10/11/3"
            },
            {
              "name": "101288",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/101288"
            },
            {
              "name": "[debian-lts-announce] 20171210 [SECURITY] [DLA 1200-1] linux security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html"
            },
            {
              "name": "RHSA-2018:2390",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2390"
            },
            {
              "name": "1039561",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1039561"
            },
            {
              "name": "RHSA-2018:1062",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1062"
            },
            {
              "name": "RHSA-2018:3823",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3823"
            },
            {
              "name": "RHSA-2018:0676",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0676"
            },
            {
              "name": "[alsa-devel] 20171011 [PATCH] ALSA: seq: Fix use-after-free at creating a port",
              "refsource": "MLIST",
              "url": "http://mailman.alsa-project.org/pipermail/alsa-devel/2017-October/126292.html"
            },
            {
              "name": "RHSA-2018:1170",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1170"
            },
            {
              "name": "USN-3698-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3698-1/"
            },
            {
              "name": "RHSA-2018:1130",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1130"
            },
            {
              "name": "RHSA-2018:3822",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3822"
            },
            {
              "name": "USN-3698-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3698-2/"
            },
            {
              "name": "https://www.oracle.com/security-alerts/cpujul2020.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/security-alerts/cpujul2020.html"
            },
            {
              "name": "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html"
            },
            {
              "name": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0",
              "refsource": "CONFIRM",
              "url": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/71105998845fb012937332fe2e806d443c09e026",
              "refsource": "CONFIRM",
              "url": "https://github.com/torvalds/linux/commit/71105998845fb012937332fe2e806d443c09e026"
            },
            {
              "name": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=71105998845fb012937332fe2e806d443c09e026",
              "refsource": "CONFIRM",
              "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=71105998845fb012937332fe2e806d443c09e026"
            },
            {
              "name": "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.8",
              "refsource": "CONFIRM",
              "url": "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.8"
            },
            {
              "name": "https://bugzilla.suse.com/show_bug.cgi?id=1062520",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.suse.com/show_bug.cgi?id=1062520"
            },
            {
              "name": "https://source.android.com/security/bulletin/2018-02-01",
              "refsource": "CONFIRM",
              "url": "https://source.android.com/security/bulletin/2018-02-01"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2017-15265",
    "datePublished": "2017-10-16T18:00:00",
    "dateReserved": "2017-10-11T00:00:00",
    "dateUpdated": "2024-08-05T19:50:16.603Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-5750

Vulnerability from cvelistv5

Published

2018-01-26 19:00

Modified

2024-08-05 05:40

Severity

Summary

The acpi_smbus_hc_add function in drivers/acpi/sbshc.c in the Linux kernel through 4.14.15 allows local users to obtain sensitive address information by reading dmesg data from an SBS HC printk call.

References

URL	Tags
https://usn.ubuntu.com/3631-2/	vendor-advisory, x_refsource_UBUNTU
https://www.debian.org/security/2018/dsa-4187	vendor-advisory, x_refsource_DEBIAN
http://www.securitytracker.com/id/1040319	vdb-entry, x_refsource_SECTRACK
https://usn.ubuntu.com/3631-1/	vendor-advisory, x_refsource_UBUNTU
https://www.debian.org/security/2018/dsa-4120	vendor-advisory, x_refsource_DEBIAN
https://usn.ubuntu.com/3697-1/	vendor-advisory, x_refsource_UBUNTU
https://access.redhat.com/errata/RHSA-2018:1062	vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:2948	vendor-advisory, x_refsource_REDHAT
https://usn.ubuntu.com/3697-2/	vendor-advisory, x_refsource_UBUNTU
https://access.redhat.com/errata/RHSA-2018:0676	vendor-advisory, x_refsource_REDHAT
https://patchwork.kernel.org/patch/10174835/	x_refsource_CONFIRM
https://usn.ubuntu.com/3698-1/	vendor-advisory, x_refsource_UBUNTU
https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html	mailing-list, x_refsource_MLIST
https://usn.ubuntu.com/3698-2/	vendor-advisory, x_refsource_UBUNTU

Impacted products

Vendor	Product
n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T05:40:51.209Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "USN-3631-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3631-2/"
          },
          {
            "name": "DSA-4187",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4187"
          },
          {
            "name": "1040319",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1040319"
          },
          {
            "name": "USN-3631-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3631-1/"
          },
          {
            "name": "DSA-4120",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4120"
          },
          {
            "name": "USN-3697-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3697-1/"
          },
          {
            "name": "RHSA-2018:1062",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1062"
          },
          {
            "name": "RHSA-2018:2948",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2948"
          },
          {
            "name": "USN-3697-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3697-2/"
          },
          {
            "name": "RHSA-2018:0676",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0676"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://patchwork.kernel.org/patch/10174835/"
          },
          {
            "name": "USN-3698-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3698-1/"
          },
          {
            "name": "[debian-lts-announce] 20180502 [SECURITY] [DLA 1369-1] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html"
          },
          {
            "name": "USN-3698-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3698-2/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-01-26T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The acpi_smbus_hc_add function in drivers/acpi/sbshc.c in the Linux kernel through 4.14.15 allows local users to obtain sensitive address information by reading dmesg data from an SBS HC printk call."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-31T09:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "USN-3631-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3631-2/"
        },
        {
          "name": "DSA-4187",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4187"
        },
        {
          "name": "1040319",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1040319"
        },
        {
          "name": "USN-3631-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3631-1/"
        },
        {
          "name": "DSA-4120",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4120"
        },
        {
          "name": "USN-3697-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3697-1/"
        },
        {
          "name": "RHSA-2018:1062",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1062"
        },
        {
          "name": "RHSA-2018:2948",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2948"
        },
        {
          "name": "USN-3697-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3697-2/"
        },
        {
          "name": "RHSA-2018:0676",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0676"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://patchwork.kernel.org/patch/10174835/"
        },
        {
          "name": "USN-3698-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3698-1/"
        },
        {
          "name": "[debian-lts-announce] 20180502 [SECURITY] [DLA 1369-1] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html"
        },
        {
          "name": "USN-3698-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3698-2/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-5750",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The acpi_smbus_hc_add function in drivers/acpi/sbshc.c in the Linux kernel through 4.14.15 allows local users to obtain sensitive address information by reading dmesg data from an SBS HC printk call."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "USN-3631-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3631-2/"
            },
            {
              "name": "DSA-4187",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4187"
            },
            {
              "name": "1040319",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1040319"
            },
            {
              "name": "USN-3631-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3631-1/"
            },
            {
              "name": "DSA-4120",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4120"
            },
            {
              "name": "USN-3697-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3697-1/"
            },
            {
              "name": "RHSA-2018:1062",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1062"
            },
            {
              "name": "RHSA-2018:2948",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2948"
            },
            {
              "name": "USN-3697-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3697-2/"
            },
            {
              "name": "RHSA-2018:0676",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0676"
            },
            {
              "name": "https://patchwork.kernel.org/patch/10174835/",
              "refsource": "CONFIRM",
              "url": "https://patchwork.kernel.org/patch/10174835/"
            },
            {
              "name": "USN-3698-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3698-1/"
            },
            {
              "name": "[debian-lts-announce] 20180502 [SECURITY] [DLA 1369-1] linux security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html"
            },
            {
              "name": "USN-3698-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3698-2/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-5750",
    "datePublished": "2018-01-26T19:00:00",
    "dateReserved": "2018-01-17T00:00:00",
    "dateUpdated": "2024-08-05T05:40:51.209Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2017-12190

Vulnerability from cvelistv5

Published

2017-11-22 18:00

Modified

2024-08-05 18:28

Severity

Summary

The bio_map_user_iov and bio_unmap_user functions in block/bio.c in the Linux kernel before 4.13.8 do unbalanced refcounting when a SCSI I/O vector has small consecutive buffers belonging to the same page. The bio_add_pc_page function merges them into one, but the page reference is never dropped. This causes a memory leak and possible system lockup (exploitable against the host OS by a guest OS user, if a SCSI disk is passed through to a virtual machine) due to an out-of-memory condition.

References

URL	Tags
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2b04e8f6bbb196cab4b232af0f8d48ff2c7a8058	x_refsource_CONFIRM
http://www.securityfocus.com/bid/101911	vdb-entry, x_refsource_BID
https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html	mailing-list, x_refsource_MLIST
https://usn.ubuntu.com/3583-2/	vendor-advisory, x_refsource_UBUNTU
https://access.redhat.com/errata/RHSA-2018:1854	vendor-advisory, x_refsource_REDHAT
https://usn.ubuntu.com/3582-1/	vendor-advisory, x_refsource_UBUNTU
http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.8	x_refsource_CONFIRM
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=95d78c28b5a85bacbc29b8dba7c04babb9b0d467	x_refsource_CONFIRM
https://access.redhat.com/errata/RHSA-2018:1062	vendor-advisory, x_refsource_REDHAT
https://github.com/torvalds/linux/commit/95d78c28b5a85bacbc29b8dba7c04babb9b0d467	x_refsource_CONFIRM
https://access.redhat.com/errata/RHSA-2018:0654	vendor-advisory, x_refsource_REDHAT
https://usn.ubuntu.com/3583-1/	vendor-advisory, x_refsource_UBUNTU
https://bugzilla.redhat.com/show_bug.cgi?id=1495089	x_refsource_CONFIRM
https://github.com/torvalds/linux/commit/2b04e8f6bbb196cab4b232af0f8d48ff2c7a8058	x_refsource_CONFIRM
http://seclists.org/oss-sec/2017/q4/52	x_refsource_CONFIRM
https://access.redhat.com/errata/RHSA-2018:0676	vendor-advisory, x_refsource_REDHAT
https://usn.ubuntu.com/3582-2/	vendor-advisory, x_refsource_UBUNTU
https://access.redhat.com/errata/RHSA-2019:1170	vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:1190	vendor-advisory, x_refsource_REDHAT
https://support.f5.com/csp/article/K93472064?utm_source=f5support&amp%3Butm_medium=RSS	x_refsource_CONFIRM

Impacted products

Vendor	Product
n/a	Linux kernel through v4.14-rc5

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T18:28:16.645Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2b04e8f6bbb196cab4b232af0f8d48ff2c7a8058"
          },
          {
            "name": "101911",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/101911"
          },
          {
            "name": "[debian-lts-announce] 20171210 [SECURITY] [DLA 1200-1] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html"
          },
          {
            "name": "USN-3583-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3583-2/"
          },
          {
            "name": "RHSA-2018:1854",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1854"
          },
          {
            "name": "USN-3582-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3582-1/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.8"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=95d78c28b5a85bacbc29b8dba7c04babb9b0d467"
          },
          {
            "name": "RHSA-2018:1062",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1062"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/95d78c28b5a85bacbc29b8dba7c04babb9b0d467"
          },
          {
            "name": "RHSA-2018:0654",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0654"
          },
          {
            "name": "USN-3583-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3583-1/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1495089"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/2b04e8f6bbb196cab4b232af0f8d48ff2c7a8058"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://seclists.org/oss-sec/2017/q4/52"
          },
          {
            "name": "RHSA-2018:0676",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0676"
          },
          {
            "name": "USN-3582-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3582-2/"
          },
          {
            "name": "RHSA-2019:1170",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1170"
          },
          {
            "name": "RHSA-2019:1190",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1190"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.f5.com/csp/article/K93472064?utm_source=f5support\u0026amp%3Butm_medium=RSS"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Linux kernel through v4.14-rc5",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Linux kernel through v4.14-rc5"
            }
          ]
        }
      ],
      "datePublic": "2017-11-22T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The bio_map_user_iov and bio_unmap_user functions in block/bio.c in the Linux kernel before 4.13.8 do unbalanced refcounting when a SCSI I/O vector has small consecutive buffers belonging to the same page. The bio_add_pc_page function merges them into one, but the page reference is never dropped. This causes a memory leak and possible system lockup (exploitable against the host OS by a guest OS user, if a SCSI disk is passed through to a virtual machine) due to an out-of-memory condition."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-400",
              "description": "CWE-400",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-11-13T02:06:45",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2b04e8f6bbb196cab4b232af0f8d48ff2c7a8058"
        },
        {
          "name": "101911",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/101911"
        },
        {
          "name": "[debian-lts-announce] 20171210 [SECURITY] [DLA 1200-1] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html"
        },
        {
          "name": "USN-3583-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3583-2/"
        },
        {
          "name": "RHSA-2018:1854",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1854"
        },
        {
          "name": "USN-3582-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3582-1/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.8"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=95d78c28b5a85bacbc29b8dba7c04babb9b0d467"
        },
        {
          "name": "RHSA-2018:1062",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1062"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/torvalds/linux/commit/95d78c28b5a85bacbc29b8dba7c04babb9b0d467"
        },
        {
          "name": "RHSA-2018:0654",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0654"
        },
        {
          "name": "USN-3583-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3583-1/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1495089"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/torvalds/linux/commit/2b04e8f6bbb196cab4b232af0f8d48ff2c7a8058"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://seclists.org/oss-sec/2017/q4/52"
        },
        {
          "name": "RHSA-2018:0676",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0676"
        },
        {
          "name": "USN-3582-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3582-2/"
        },
        {
          "name": "RHSA-2019:1170",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1170"
        },
        {
          "name": "RHSA-2019:1190",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1190"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.f5.com/csp/article/K93472064?utm_source=f5support\u0026amp%3Butm_medium=RSS"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2017-12190",
    "datePublished": "2017-11-22T18:00:00",
    "dateReserved": "2017-08-01T00:00:00",
    "dateUpdated": "2024-08-05T18:28:16.645Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2017-14140

Vulnerability from cvelistv5

Published

2017-09-05 06:00

Modified

2024-08-05 19:20

Severity

Summary

The move_pages system call in mm/migrate.c in the Linux kernel before 4.12.9 doesn't check the effective uid of the target process, enabling a local attacker to learn the memory layout of a setuid executable despite ASLR.

References

URL	Tags
http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.12.9	x_refsource_CONFIRM
https://usn.ubuntu.com/3583-2/	vendor-advisory, x_refsource_UBUNTU
https://access.redhat.com/errata/RHSA-2018:1062	vendor-advisory, x_refsource_REDHAT
https://source.android.com/security/bulletin/pixel/2018-01-01	x_refsource_CONFIRM
http://www.debian.org/security/2017/dsa-3981	vendor-advisory, x_refsource_DEBIAN
https://usn.ubuntu.com/3583-1/	vendor-advisory, x_refsource_UBUNTU
https://access.redhat.com/errata/RHSA-2018:0676	vendor-advisory, x_refsource_REDHAT
https://github.com/torvalds/linux/commit/197e7e521384a23b9e585178f3f11c9fa08274b9	x_refsource_CONFIRM
http://www.securityfocus.com/bid/100876	vdb-entry, x_refsource_BID
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=197e7e521384a23b9e585178f3f11c9fa08274b9	x_refsource_CONFIRM

Impacted products

Vendor	Product
n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T19:20:40.695Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.12.9"
          },
          {
            "name": "USN-3583-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3583-2/"
          },
          {
            "name": "RHSA-2018:1062",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1062"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://source.android.com/security/bulletin/pixel/2018-01-01"
          },
          {
            "name": "DSA-3981",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3981"
          },
          {
            "name": "USN-3583-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3583-1/"
          },
          {
            "name": "RHSA-2018:0676",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0676"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/197e7e521384a23b9e585178f3f11c9fa08274b9"
          },
          {
            "name": "100876",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/100876"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=197e7e521384a23b9e585178f3f11c9fa08274b9"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-09-05T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The move_pages system call in mm/migrate.c in the Linux kernel before 4.12.9 doesn\u0027t check the effective uid of the target process, enabling a local attacker to learn the memory layout of a setuid executable despite ASLR."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-04-11T09:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.12.9"
        },
        {
          "name": "USN-3583-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3583-2/"
        },
        {
          "name": "RHSA-2018:1062",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1062"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://source.android.com/security/bulletin/pixel/2018-01-01"
        },
        {
          "name": "DSA-3981",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3981"
        },
        {
          "name": "USN-3583-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3583-1/"
        },
        {
          "name": "RHSA-2018:0676",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0676"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/torvalds/linux/commit/197e7e521384a23b9e585178f3f11c9fa08274b9"
        },
        {
          "name": "100876",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/100876"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=197e7e521384a23b9e585178f3f11c9fa08274b9"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-14140",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The move_pages system call in mm/migrate.c in the Linux kernel before 4.12.9 doesn\u0027t check the effective uid of the target process, enabling a local attacker to learn the memory layout of a setuid executable despite ASLR."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.12.9",
              "refsource": "CONFIRM",
              "url": "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.12.9"
            },
            {
              "name": "USN-3583-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3583-2/"
            },
            {
              "name": "RHSA-2018:1062",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1062"
            },
            {
              "name": "https://source.android.com/security/bulletin/pixel/2018-01-01",
              "refsource": "CONFIRM",
              "url": "https://source.android.com/security/bulletin/pixel/2018-01-01"
            },
            {
              "name": "DSA-3981",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3981"
            },
            {
              "name": "USN-3583-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3583-1/"
            },
            {
              "name": "RHSA-2018:0676",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0676"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/197e7e521384a23b9e585178f3f11c9fa08274b9",
              "refsource": "CONFIRM",
              "url": "https://github.com/torvalds/linux/commit/197e7e521384a23b9e585178f3f11c9fa08274b9"
            },
            {
              "name": "100876",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/100876"
            },
            {
              "name": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=197e7e521384a23b9e585178f3f11c9fa08274b9",
              "refsource": "CONFIRM",
              "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=197e7e521384a23b9e585178f3f11c9fa08274b9"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2017-14140",
    "datePublished": "2017-09-05T06:00:00",
    "dateReserved": "2017-09-05T00:00:00",
    "dateUpdated": "2024-08-05T19:20:40.695Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2017-13166

Vulnerability from cvelistv5

Published

2017-12-06 14:00

Modified

2024-09-16 22:40

Severity

Summary

An elevation of privilege vulnerability in the kernel v4l2 video driver. Product: Android. Versions: Android kernel. Android ID A-34624167.

References

URL	Tags
https://www.debian.org/security/2018/dsa-4187	vendor-advisory, x_refsource_DEBIAN
https://www.debian.org/security/2018/dsa-4120	vendor-advisory, x_refsource_DEBIAN
https://access.redhat.com/errata/RHSA-2018:1062	vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:1319	vendor-advisory, x_refsource_REDHAT
https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0	x_refsource_CONFIRM
https://access.redhat.com/errata/RHSA-2018:2948	vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:0676	vendor-advisory, x_refsource_REDHAT
https://source.android.com/security/bulletin/pixel/2017-12-01	x_refsource_CONFIRM
https://access.redhat.com/errata/RHSA-2018:1170	vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:1130	vendor-advisory, x_refsource_REDHAT
https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html	mailing-list, x_refsource_MLIST

Impacted products

Vendor	Product
Google Inc.	Android

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T18:58:12.550Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-4187",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4187"
          },
          {
            "name": "DSA-4120",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4120"
          },
          {
            "name": "RHSA-2018:1062",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1062"
          },
          {
            "name": "RHSA-2018:1319",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1319"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0"
          },
          {
            "name": "RHSA-2018:2948",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2948"
          },
          {
            "name": "RHSA-2018:0676",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0676"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://source.android.com/security/bulletin/pixel/2017-12-01"
          },
          {
            "name": "RHSA-2018:1170",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1170"
          },
          {
            "name": "RHSA-2018:1130",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1130"
          },
          {
            "name": "[debian-lts-announce] 20180502 [SECURITY] [DLA 1369-1] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Android",
          "vendor": "Google Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "Android kernel"
            }
          ]
        }
      ],
      "datePublic": "2017-12-04T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "An elevation of privilege vulnerability in the kernel v4l2 video driver. Product: Android. Versions: Android kernel. Android ID A-34624167."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Elevation of privilege",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-11-30T20:57:01",
        "orgId": "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6",
        "shortName": "google_android"
      },
      "references": [
        {
          "name": "DSA-4187",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4187"
        },
        {
          "name": "DSA-4120",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4120"
        },
        {
          "name": "RHSA-2018:1062",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1062"
        },
        {
          "name": "RHSA-2018:1319",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1319"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0"
        },
        {
          "name": "RHSA-2018:2948",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2948"
        },
        {
          "name": "RHSA-2018:0676",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0676"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://source.android.com/security/bulletin/pixel/2017-12-01"
        },
        {
          "name": "RHSA-2018:1170",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1170"
        },
        {
          "name": "RHSA-2018:1130",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1130"
        },
        {
          "name": "[debian-lts-announce] 20180502 [SECURITY] [DLA 1369-1] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@android.com",
          "DATE_PUBLIC": "2017-12-04T00:00:00",
          "ID": "CVE-2017-13166",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Android",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Android kernel"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Google Inc."
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An elevation of privilege vulnerability in the kernel v4l2 video driver. Product: Android. Versions: Android kernel. Android ID A-34624167."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Elevation of privilege"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-4187",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4187"
            },
            {
              "name": "DSA-4120",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4120"
            },
            {
              "name": "RHSA-2018:1062",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1062"
            },
            {
              "name": "RHSA-2018:1319",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1319"
            },
            {
              "name": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0",
              "refsource": "CONFIRM",
              "url": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0"
            },
            {
              "name": "RHSA-2018:2948",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2948"
            },
            {
              "name": "RHSA-2018:0676",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0676"
            },
            {
              "name": "https://source.android.com/security/bulletin/pixel/2017-12-01",
              "refsource": "CONFIRM",
              "url": "https://source.android.com/security/bulletin/pixel/2017-12-01"
            },
            {
              "name": "RHSA-2018:1170",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1170"
            },
            {
              "name": "RHSA-2018:1130",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1130"
            },
            {
              "name": "[debian-lts-announce] 20180502 [SECURITY] [DLA 1369-1] linux security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6",
    "assignerShortName": "google_android",
    "cveId": "CVE-2017-13166",
    "datePublished": "2017-12-06T14:00:00Z",
    "dateReserved": "2017-08-23T00:00:00",
    "dateUpdated": "2024-09-16T22:40:26.567Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2017-8824

Vulnerability from cvelistv5

Published

2017-12-05 09:00

Modified

2024-08-05 16:48

Severity

Summary

The dccp_disconnect function in net/dccp/proto.c in the Linux kernel through 4.14.3 allows local users to gain privileges or cause a denial of service (use-after-free) via an AF_UNSPEC connect system call during the DCCP_LISTEN state.

References

URL	Tags
https://www.debian.org/security/2018/dsa-4082	vendor-advisory, x_refsource_DEBIAN
https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html	mailing-list, x_refsource_MLIST
https://usn.ubuntu.com/3583-2/	vendor-advisory, x_refsource_UBUNTU
http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html	vendor-advisory, x_refsource_SUSE
https://usn.ubuntu.com/3582-1/	vendor-advisory, x_refsource_UBUNTU
https://access.redhat.com/errata/RHSA-2018:1062	vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:1319	vendor-advisory, x_refsource_REDHAT
https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0	x_refsource_CONFIRM
https://usn.ubuntu.com/3583-1/	vendor-advisory, x_refsource_UBUNTU
https://access.redhat.com/errata/RHSA-2018:0676	vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:1216	vendor-advisory, x_refsource_REDHAT
https://www.exploit-db.com/exploits/43234/	exploit, x_refsource_EXPLOIT-DB
http://www.securityfocus.com/bid/102056	vdb-entry, x_refsource_BID
https://usn.ubuntu.com/3581-1/	vendor-advisory, x_refsource_UBUNTU
https://usn.ubuntu.com/3581-3/	vendor-advisory, x_refsource_UBUNTU
https://access.redhat.com/errata/RHSA-2018:1170	vendor-advisory, x_refsource_REDHAT
https://usn.ubuntu.com/3581-2/	vendor-advisory, x_refsource_UBUNTU
https://access.redhat.com/errata/RHSA-2018:1130	vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:0399	vendor-advisory, x_refsource_REDHAT
https://www.debian.org/security/2017/dsa-4073	vendor-advisory, x_refsource_DEBIAN
https://access.redhat.com/errata/RHSA-2018:3822	vendor-advisory, x_refsource_REDHAT
http://lists.openwall.net/netdev/2017/12/04/224	x_refsource_MISC
https://usn.ubuntu.com/3582-2/	vendor-advisory, x_refsource_UBUNTU
http://www.openwall.com/lists/oss-security/2017/12/05/1	x_refsource_MISC

Impacted products

Vendor	Product
n/a	Linux kernel through 4.14.3

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T16:48:22.581Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-4082",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4082"
          },
          {
            "name": "[debian-lts-announce] 20171210 [SECURITY] [DLA 1200-1] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html"
          },
          {
            "name": "USN-3583-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3583-2/"
          },
          {
            "name": "SUSE-SU-2018:0011",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html"
          },
          {
            "name": "USN-3582-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3582-1/"
          },
          {
            "name": "RHSA-2018:1062",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1062"
          },
          {
            "name": "RHSA-2018:1319",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1319"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0"
          },
          {
            "name": "USN-3583-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3583-1/"
          },
          {
            "name": "RHSA-2018:0676",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0676"
          },
          {
            "name": "RHSA-2018:1216",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1216"
          },
          {
            "name": "43234",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "https://www.exploit-db.com/exploits/43234/"
          },
          {
            "name": "102056",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/102056"
          },
          {
            "name": "USN-3581-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3581-1/"
          },
          {
            "name": "USN-3581-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3581-3/"
          },
          {
            "name": "RHSA-2018:1170",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1170"
          },
          {
            "name": "USN-3581-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3581-2/"
          },
          {
            "name": "RHSA-2018:1130",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1130"
          },
          {
            "name": "RHSA-2018:0399",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0399"
          },
          {
            "name": "DSA-4073",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-4073"
          },
          {
            "name": "RHSA-2018:3822",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3822"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://lists.openwall.net/netdev/2017/12/04/224"
          },
          {
            "name": "USN-3582-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3582-2/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2017/12/05/1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Linux kernel through 4.14.3",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Linux kernel through 4.14.3"
            }
          ]
        }
      ],
      "datePublic": "2017-12-05T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The dccp_disconnect function in net/dccp/proto.c in the Linux kernel through 4.14.3 allows local users to gain privileges or cause a denial of service (use-after-free) via an AF_UNSPEC connect system call during the DCCP_LISTEN state."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "use-after-free",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-12-13T10:57:01",
        "orgId": "79363d38-fa19-49d1-9214-5f28da3f3ac5",
        "shortName": "debian"
      },
      "references": [
        {
          "name": "DSA-4082",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4082"
        },
        {
          "name": "[debian-lts-announce] 20171210 [SECURITY] [DLA 1200-1] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html"
        },
        {
          "name": "USN-3583-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3583-2/"
        },
        {
          "name": "SUSE-SU-2018:0011",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html"
        },
        {
          "name": "USN-3582-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3582-1/"
        },
        {
          "name": "RHSA-2018:1062",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1062"
        },
        {
          "name": "RHSA-2018:1319",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1319"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0"
        },
        {
          "name": "USN-3583-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3583-1/"
        },
        {
          "name": "RHSA-2018:0676",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0676"
        },
        {
          "name": "RHSA-2018:1216",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1216"
        },
        {
          "name": "43234",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "https://www.exploit-db.com/exploits/43234/"
        },
        {
          "name": "102056",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/102056"
        },
        {
          "name": "USN-3581-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3581-1/"
        },
        {
          "name": "USN-3581-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3581-3/"
        },
        {
          "name": "RHSA-2018:1170",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1170"
        },
        {
          "name": "USN-3581-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3581-2/"
        },
        {
          "name": "RHSA-2018:1130",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1130"
        },
        {
          "name": "RHSA-2018:0399",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0399"
        },
        {
          "name": "DSA-4073",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-4073"
        },
        {
          "name": "RHSA-2018:3822",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3822"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://lists.openwall.net/netdev/2017/12/04/224"
        },
        {
          "name": "USN-3582-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3582-2/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2017/12/05/1"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@debian.org",
          "ID": "CVE-2017-8824",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Linux kernel through 4.14.3",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Linux kernel through 4.14.3"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The dccp_disconnect function in net/dccp/proto.c in the Linux kernel through 4.14.3 allows local users to gain privileges or cause a denial of service (use-after-free) via an AF_UNSPEC connect system call during the DCCP_LISTEN state."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "use-after-free"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-4082",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4082"
            },
            {
              "name": "[debian-lts-announce] 20171210 [SECURITY] [DLA 1200-1] linux security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html"
            },
            {
              "name": "USN-3583-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3583-2/"
            },
            {
              "name": "SUSE-SU-2018:0011",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html"
            },
            {
              "name": "USN-3582-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3582-1/"
            },
            {
              "name": "RHSA-2018:1062",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1062"
            },
            {
              "name": "RHSA-2018:1319",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1319"
            },
            {
              "name": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0",
              "refsource": "CONFIRM",
              "url": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0"
            },
            {
              "name": "USN-3583-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3583-1/"
            },
            {
              "name": "RHSA-2018:0676",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0676"
            },
            {
              "name": "RHSA-2018:1216",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1216"
            },
            {
              "name": "43234",
              "refsource": "EXPLOIT-DB",
              "url": "https://www.exploit-db.com/exploits/43234/"
            },
            {
              "name": "102056",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/102056"
            },
            {
              "name": "USN-3581-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3581-1/"
            },
            {
              "name": "USN-3581-3",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3581-3/"
            },
            {
              "name": "RHSA-2018:1170",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1170"
            },
            {
              "name": "USN-3581-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3581-2/"
            },
            {
              "name": "RHSA-2018:1130",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1130"
            },
            {
              "name": "RHSA-2018:0399",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0399"
            },
            {
              "name": "DSA-4073",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-4073"
            },
            {
              "name": "RHSA-2018:3822",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3822"
            },
            {
              "name": "http://lists.openwall.net/netdev/2017/12/04/224",
              "refsource": "MISC",
              "url": "http://lists.openwall.net/netdev/2017/12/04/224"
            },
            {
              "name": "USN-3582-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3582-2/"
            },
            {
              "name": "http://www.openwall.com/lists/oss-security/2017/12/05/1",
              "refsource": "MISC",
              "url": "http://www.openwall.com/lists/oss-security/2017/12/05/1"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "79363d38-fa19-49d1-9214-5f28da3f3ac5",
    "assignerShortName": "debian",
    "cveId": "CVE-2017-8824",
    "datePublished": "2017-12-05T09:00:00",
    "dateReserved": "2017-05-07T00:00:00",
    "dateUpdated": "2024-08-05T16:48:22.581Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2016-3672

Vulnerability from cvelistv5

Published

2016-04-27 17:00

Modified

2024-08-06 00:03

Severity

Summary

The arch_pick_mmap_layout function in arch/x86/mm/mmap.c in the Linux kernel through 4.5.2 does not properly randomize the legacy base address, which makes it easier for local users to defeat the intended restrictions on the ADDR_NO_RANDOMIZE flag, and bypass the ASLR protection mechanism for a setuid or setgid program, by disabling stack-consumption resource limits.

References

URL	Tags
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html	vendor-advisory, x_refsource_SUSE
http://www.ubuntu.com/usn/USN-3004-1	vendor-advisory, x_refsource_UBUNTU
http://www.ubuntu.com/usn/USN-3001-1	vendor-advisory, x_refsource_UBUNTU
http://www.securityfocus.com/archive/1/537996/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
http://hmarco.org/bugs/CVE-2016-3672-Unlimiting-the-stack-not-longer-disables-ASLR.html	x_refsource_MISC
http://seclists.org/fulldisclosure/2016/Apr/26	mailing-list, x_refsource_FULLDISC
http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html	vendor-advisory, x_refsource_SUSE
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8b8addf891de8a00e4d39fc32f93f7c5eb8feceb	x_refsource_CONFIRM
http://www.securityfocus.com/bid/85884	vdb-entry, x_refsource_BID
https://access.redhat.com/errata/RHSA-2018:1062	vendor-advisory, x_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html	vendor-advisory, x_refsource_SUSE
http://www.ubuntu.com/usn/USN-2997-1	vendor-advisory, x_refsource_UBUNTU
http://www.ubuntu.com/usn/USN-3000-1	vendor-advisory, x_refsource_UBUNTU
https://github.com/torvalds/linux/commit/8b8addf891de8a00e4d39fc32f93f7c5eb8feceb	x_refsource_CONFIRM
http://hmarco.org/bugs/CVE-2016-3672-Unlimiting-the-stack-not-longer-dis	x_refsource_MISC
http://www.debian.org/security/2016/dsa-3607	vendor-advisory, x_refsource_DEBIAN
http://www.ubuntu.com/usn/USN-3002-1	vendor-advisory, x_refsource_UBUNTU
http://www.ubuntu.com/usn/USN-2996-1	vendor-advisory, x_refsource_UBUNTU
http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182524.html	vendor-advisory, x_refsource_FEDORA
https://access.redhat.com/errata/RHSA-2018:0676	vendor-advisory, x_refsource_REDHAT
https://www.exploit-db.com/exploits/39669/	exploit, x_refsource_EXPLOIT-DB
http://www.ubuntu.com/usn/USN-2989-1	vendor-advisory, x_refsource_UBUNTU
https://bugzilla.redhat.com/show_bug.cgi?id=1324749	x_refsource_CONFIRM
http://www.securitytracker.com/id/1035506	vdb-entry, x_refsource_SECTRACK
http://www.ubuntu.com/usn/USN-3003-1	vendor-advisory, x_refsource_UBUNTU
http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html	vendor-advisory, x_refsource_SUSE
http://www.ubuntu.com/usn/USN-2998-1	vendor-advisory, x_refsource_UBUNTU
http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html	vendor-advisory, x_refsource_SUSE

Impacted products

Vendor	Product
n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T00:03:34.467Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SUSE-SU-2016:1690",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html"
          },
          {
            "name": "USN-3004-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-3004-1"
          },
          {
            "name": "USN-3001-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-3001-1"
          },
          {
            "name": "20160406 CVE-2016-3672 - Unlimiting the stack not longer disables ASLR",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/537996/100/0/threaded"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://hmarco.org/bugs/CVE-2016-3672-Unlimiting-the-stack-not-longer-disables-ASLR.html"
          },
          {
            "name": "20160406 CVE-2016-3672 - Unlimiting the stack not longer disables ASLR",
            "tags": [
              "mailing-list",
              "x_refsource_FULLDISC",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2016/Apr/26"
          },
          {
            "name": "openSUSE-SU-2016:2184",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8b8addf891de8a00e4d39fc32f93f7c5eb8feceb"
          },
          {
            "name": "85884",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/85884"
          },
          {
            "name": "RHSA-2018:1062",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1062"
          },
          {
            "name": "openSUSE-SU-2016:1641",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html"
          },
          {
            "name": "USN-2997-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2997-1"
          },
          {
            "name": "USN-3000-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-3000-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/8b8addf891de8a00e4d39fc32f93f7c5eb8feceb"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://hmarco.org/bugs/CVE-2016-3672-Unlimiting-the-stack-not-longer-dis"
          },
          {
            "name": "DSA-3607",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3607"
          },
          {
            "name": "USN-3002-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-3002-1"
          },
          {
            "name": "USN-2996-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2996-1"
          },
          {
            "name": "FEDORA-2016-76706f51a7",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182524.html"
          },
          {
            "name": "RHSA-2018:0676",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0676"
          },
          {
            "name": "39669",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "https://www.exploit-db.com/exploits/39669/"
          },
          {
            "name": "USN-2989-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2989-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324749"
          },
          {
            "name": "1035506",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1035506"
          },
          {
            "name": "USN-3003-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-3003-1"
          },
          {
            "name": "SUSE-SU-2016:2105",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html"
          },
          {
            "name": "USN-2998-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2998-1"
          },
          {
            "name": "SUSE-SU-2016:1937",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-04-27T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The arch_pick_mmap_layout function in arch/x86/mm/mmap.c in the Linux kernel through 4.5.2 does not properly randomize the legacy base address, which makes it easier for local users to defeat the intended restrictions on the ADDR_NO_RANDOMIZE flag, and bypass the ASLR protection mechanism for a setuid or setgid program, by disabling stack-consumption resource limits."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-09T18:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "SUSE-SU-2016:1690",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html"
        },
        {
          "name": "USN-3004-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-3004-1"
        },
        {
          "name": "USN-3001-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-3001-1"
        },
        {
          "name": "20160406 CVE-2016-3672 - Unlimiting the stack not longer disables ASLR",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/537996/100/0/threaded"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://hmarco.org/bugs/CVE-2016-3672-Unlimiting-the-stack-not-longer-disables-ASLR.html"
        },
        {
          "name": "20160406 CVE-2016-3672 - Unlimiting the stack not longer disables ASLR",
          "tags": [
            "mailing-list",
            "x_refsource_FULLDISC"
          ],
          "url": "http://seclists.org/fulldisclosure/2016/Apr/26"
        },
        {
          "name": "openSUSE-SU-2016:2184",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8b8addf891de8a00e4d39fc32f93f7c5eb8feceb"
        },
        {
          "name": "85884",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/85884"
        },
        {
          "name": "RHSA-2018:1062",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1062"
        },
        {
          "name": "openSUSE-SU-2016:1641",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html"
        },
        {
          "name": "USN-2997-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2997-1"
        },
        {
          "name": "USN-3000-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-3000-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/torvalds/linux/commit/8b8addf891de8a00e4d39fc32f93f7c5eb8feceb"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://hmarco.org/bugs/CVE-2016-3672-Unlimiting-the-stack-not-longer-dis"
        },
        {
          "name": "DSA-3607",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3607"
        },
        {
          "name": "USN-3002-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-3002-1"
        },
        {
          "name": "USN-2996-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2996-1"
        },
        {
          "name": "FEDORA-2016-76706f51a7",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182524.html"
        },
        {
          "name": "RHSA-2018:0676",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0676"
        },
        {
          "name": "39669",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "https://www.exploit-db.com/exploits/39669/"
        },
        {
          "name": "USN-2989-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2989-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324749"
        },
        {
          "name": "1035506",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1035506"
        },
        {
          "name": "USN-3003-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-3003-1"
        },
        {
          "name": "SUSE-SU-2016:2105",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html"
        },
        {
          "name": "USN-2998-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2998-1"
        },
        {
          "name": "SUSE-SU-2016:1937",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-3672",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The arch_pick_mmap_layout function in arch/x86/mm/mmap.c in the Linux kernel through 4.5.2 does not properly randomize the legacy base address, which makes it easier for local users to defeat the intended restrictions on the ADDR_NO_RANDOMIZE flag, and bypass the ASLR protection mechanism for a setuid or setgid program, by disabling stack-consumption resource limits."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "SUSE-SU-2016:1690",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html"
            },
            {
              "name": "USN-3004-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-3004-1"
            },
            {
              "name": "USN-3001-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-3001-1"
            },
            {
              "name": "20160406 CVE-2016-3672 - Unlimiting the stack not longer disables ASLR",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/537996/100/0/threaded"
            },
            {
              "name": "http://hmarco.org/bugs/CVE-2016-3672-Unlimiting-the-stack-not-longer-disables-ASLR.html",
              "refsource": "MISC",
              "url": "http://hmarco.org/bugs/CVE-2016-3672-Unlimiting-the-stack-not-longer-disables-ASLR.html"
            },
            {
              "name": "20160406 CVE-2016-3672 - Unlimiting the stack not longer disables ASLR",
              "refsource": "FULLDISC",
              "url": "http://seclists.org/fulldisclosure/2016/Apr/26"
            },
            {
              "name": "openSUSE-SU-2016:2184",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html"
            },
            {
              "name": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8b8addf891de8a00e4d39fc32f93f7c5eb8feceb",
              "refsource": "CONFIRM",
              "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8b8addf891de8a00e4d39fc32f93f7c5eb8feceb"
            },
            {
              "name": "85884",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/85884"
            },
            {
              "name": "RHSA-2018:1062",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1062"
            },
            {
              "name": "openSUSE-SU-2016:1641",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html"
            },
            {
              "name": "USN-2997-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2997-1"
            },
            {
              "name": "USN-3000-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-3000-1"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/8b8addf891de8a00e4d39fc32f93f7c5eb8feceb",
              "refsource": "CONFIRM",
              "url": "https://github.com/torvalds/linux/commit/8b8addf891de8a00e4d39fc32f93f7c5eb8feceb"
            },
            {
              "name": "http://hmarco.org/bugs/CVE-2016-3672-Unlimiting-the-stack-not-longer-dis",
              "refsource": "MISC",
              "url": "http://hmarco.org/bugs/CVE-2016-3672-Unlimiting-the-stack-not-longer-dis"
            },
            {
              "name": "DSA-3607",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3607"
            },
            {
              "name": "USN-3002-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-3002-1"
            },
            {
              "name": "USN-2996-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2996-1"
            },
            {
              "name": "FEDORA-2016-76706f51a7",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182524.html"
            },
            {
              "name": "RHSA-2018:0676",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0676"
            },
            {
              "name": "39669",
              "refsource": "EXPLOIT-DB",
              "url": "https://www.exploit-db.com/exploits/39669/"
            },
            {
              "name": "USN-2989-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2989-1"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1324749",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324749"
            },
            {
              "name": "1035506",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1035506"
            },
            {
              "name": "USN-3003-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-3003-1"
            },
            {
              "name": "SUSE-SU-2016:2105",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html"
            },
            {
              "name": "USN-2998-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2998-1"
            },
            {
              "name": "SUSE-SU-2016:1937",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-3672",
    "datePublished": "2016-04-27T17:00:00",
    "dateReserved": "2016-03-25T00:00:00",
    "dateUpdated": "2024-08-06T00:03:34.467Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-6927

Vulnerability from cvelistv5

Published

2018-02-12 19:00

Modified

2024-08-05 06:17

Severity

Summary

The futex_requeue function in kernel/futex.c in the Linux kernel before 4.14.15 might allow attackers to cause a denial of service (integer overflow) or possibly have unspecified other impact by triggering a negative wake or requeue value.

References

URL	Tags
https://www.debian.org/security/2018/dsa-4187	vendor-advisory, x_refsource_DEBIAN
https://usn.ubuntu.com/3619-2/	vendor-advisory, x_refsource_UBUNTU
https://usn.ubuntu.com/3697-1/	vendor-advisory, x_refsource_UBUNTU
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=fbe0e839d1e22d88810f3ee3e2f1479be4c0aa4a	x_refsource_MISC
https://access.redhat.com/errata/RHSA-2018:1062	vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:0654	vendor-advisory, x_refsource_REDHAT
https://github.com/torvalds/linux/commit/fbe0e839d1e22d88810f3ee3e2f1479be4c0aa4a	x_refsource_MISC
https://usn.ubuntu.com/3697-2/	vendor-advisory, x_refsource_UBUNTU
http://www.securityfocus.com/bid/103023	vdb-entry, x_refsource_BID
https://access.redhat.com/errata/RHSA-2018:0676	vendor-advisory, x_refsource_REDHAT
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.15	x_refsource_MISC
https://usn.ubuntu.com/3698-1/	vendor-advisory, x_refsource_UBUNTU
https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html	mailing-list, x_refsource_MLIST
https://usn.ubuntu.com/3619-1/	vendor-advisory, x_refsource_UBUNTU
https://usn.ubuntu.com/3698-2/	vendor-advisory, x_refsource_UBUNTU

Impacted products

Vendor	Product
n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T06:17:17.281Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-4187",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4187"
          },
          {
            "name": "USN-3619-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3619-2/"
          },
          {
            "name": "USN-3697-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3697-1/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=fbe0e839d1e22d88810f3ee3e2f1479be4c0aa4a"
          },
          {
            "name": "RHSA-2018:1062",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1062"
          },
          {
            "name": "RHSA-2018:0654",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0654"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/fbe0e839d1e22d88810f3ee3e2f1479be4c0aa4a"
          },
          {
            "name": "USN-3697-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3697-2/"
          },
          {
            "name": "103023",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/103023"
          },
          {
            "name": "RHSA-2018:0676",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0676"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.15"
          },
          {
            "name": "USN-3698-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3698-1/"
          },
          {
            "name": "[debian-lts-announce] 20180502 [SECURITY] [DLA 1369-1] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html"
          },
          {
            "name": "USN-3619-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3619-1/"
          },
          {
            "name": "USN-3698-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3698-2/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-02-12T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The futex_requeue function in kernel/futex.c in the Linux kernel before 4.14.15 might allow attackers to cause a denial of service (integer overflow) or possibly have unspecified other impact by triggering a negative wake or requeue value."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-07-12T09:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "DSA-4187",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4187"
        },
        {
          "name": "USN-3619-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3619-2/"
        },
        {
          "name": "USN-3697-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3697-1/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=fbe0e839d1e22d88810f3ee3e2f1479be4c0aa4a"
        },
        {
          "name": "RHSA-2018:1062",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1062"
        },
        {
          "name": "RHSA-2018:0654",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0654"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/torvalds/linux/commit/fbe0e839d1e22d88810f3ee3e2f1479be4c0aa4a"
        },
        {
          "name": "USN-3697-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3697-2/"
        },
        {
          "name": "103023",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/103023"
        },
        {
          "name": "RHSA-2018:0676",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0676"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.15"
        },
        {
          "name": "USN-3698-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3698-1/"
        },
        {
          "name": "[debian-lts-announce] 20180502 [SECURITY] [DLA 1369-1] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html"
        },
        {
          "name": "USN-3619-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3619-1/"
        },
        {
          "name": "USN-3698-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3698-2/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-6927",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The futex_requeue function in kernel/futex.c in the Linux kernel before 4.14.15 might allow attackers to cause a denial of service (integer overflow) or possibly have unspecified other impact by triggering a negative wake or requeue value."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-4187",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4187"
            },
            {
              "name": "USN-3619-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3619-2/"
            },
            {
              "name": "USN-3697-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3697-1/"
            },
            {
              "name": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=fbe0e839d1e22d88810f3ee3e2f1479be4c0aa4a",
              "refsource": "MISC",
              "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=fbe0e839d1e22d88810f3ee3e2f1479be4c0aa4a"
            },
            {
              "name": "RHSA-2018:1062",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1062"
            },
            {
              "name": "RHSA-2018:0654",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0654"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/fbe0e839d1e22d88810f3ee3e2f1479be4c0aa4a",
              "refsource": "MISC",
              "url": "https://github.com/torvalds/linux/commit/fbe0e839d1e22d88810f3ee3e2f1479be4c0aa4a"
            },
            {
              "name": "USN-3697-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3697-2/"
            },
            {
              "name": "103023",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/103023"
            },
            {
              "name": "RHSA-2018:0676",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0676"
            },
            {
              "name": "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.15",
              "refsource": "MISC",
              "url": "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.15"
            },
            {
              "name": "USN-3698-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3698-1/"
            },
            {
              "name": "[debian-lts-announce] 20180502 [SECURITY] [DLA 1369-1] linux security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html"
            },
            {
              "name": "USN-3619-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3619-1/"
            },
            {
              "name": "USN-3698-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3698-2/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-6927",
    "datePublished": "2018-02-12T19:00:00",
    "dateReserved": "2018-02-12T00:00:00",
    "dateUpdated": "2024-08-05T06:17:17.281Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-1000004

Vulnerability from cvelistv5

Published

2018-01-16 20:00

Modified

2024-08-05 12:33

Severity

Summary

In the Linux kernel 4.12, 3.10, 2.6 and possibly earlier versions a race condition vulnerability exists in the sound system, this can lead to a deadlock and denial of service condition.

References

URL	Tags
https://usn.ubuntu.com/3631-2/	vendor-advisory, x_refsource_UBUNTU
https://www.debian.org/security/2018/dsa-4187	vendor-advisory, x_refsource_DEBIAN
https://usn.ubuntu.com/3631-1/	vendor-advisory, x_refsource_UBUNTU
https://access.redhat.com/errata/RHSA-2018:2390	vendor-advisory, x_refsource_REDHAT
http://www.securityfocus.com/bid/104606	vdb-entry, x_refsource_BID
https://access.redhat.com/errata/RHSA-2018:1062	vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:0654	vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:0676	vendor-advisory, x_refsource_REDHAT
http://seclists.org/oss-sec/2018/q1/51	mailing-list, x_refsource_MLIST
https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html	mailing-list, x_refsource_MLIST
https://usn.ubuntu.com/3798-1/	vendor-advisory, x_refsource_UBUNTU
https://usn.ubuntu.com/3798-2/	vendor-advisory, x_refsource_UBUNTU
https://access.redhat.com/errata/RHSA-2019:1483	vendor-advisory, x_refsource_REDHAT
https://www.oracle.com/security-alerts/cpujul2020.html	x_refsource_MISC
https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html	x_refsource_MISC
https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0	x_refsource_CONFIRM

Impacted products

Vendor	Product
n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T12:33:48.504Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "USN-3631-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3631-2/"
          },
          {
            "name": "DSA-4187",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4187"
          },
          {
            "name": "USN-3631-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3631-1/"
          },
          {
            "name": "RHSA-2018:2390",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2390"
          },
          {
            "name": "104606",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104606"
          },
          {
            "name": "RHSA-2018:1062",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1062"
          },
          {
            "name": "RHSA-2018:0654",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0654"
          },
          {
            "name": "RHSA-2018:0676",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0676"
          },
          {
            "name": "[oss-security] 20180116 sound driver Conditional competition",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://seclists.org/oss-sec/2018/q1/51"
          },
          {
            "name": "[debian-lts-announce] 20180502 [SECURITY] [DLA 1369-1] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html"
          },
          {
            "name": "USN-3798-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3798-1/"
          },
          {
            "name": "USN-3798-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3798-2/"
          },
          {
            "name": "RHSA-2019:1483",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1483"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpujul2020.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "dateAssigned": "2018-01-15T00:00:00",
      "datePublic": "2018-01-16T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel 4.12, 3.10, 2.6 and possibly earlier versions a race condition vulnerability exists in the sound system, this can lead to a deadlock and denial of service condition."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-07-15T02:22:56",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "USN-3631-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3631-2/"
        },
        {
          "name": "DSA-4187",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4187"
        },
        {
          "name": "USN-3631-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3631-1/"
        },
        {
          "name": "RHSA-2018:2390",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2390"
        },
        {
          "name": "104606",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/104606"
        },
        {
          "name": "RHSA-2018:1062",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1062"
        },
        {
          "name": "RHSA-2018:0654",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0654"
        },
        {
          "name": "RHSA-2018:0676",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0676"
        },
        {
          "name": "[oss-security] 20180116 sound driver Conditional competition",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://seclists.org/oss-sec/2018/q1/51"
        },
        {
          "name": "[debian-lts-announce] 20180502 [SECURITY] [DLA 1369-1] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html"
        },
        {
          "name": "USN-3798-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3798-1/"
        },
        {
          "name": "USN-3798-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3798-2/"
        },
        {
          "name": "RHSA-2019:1483",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1483"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/security-alerts/cpujul2020.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "DATE_ASSIGNED": "2018-01-15",
          "ID": "CVE-2018-1000004",
          "REQUESTER": "a4651386@163.com",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In the Linux kernel 4.12, 3.10, 2.6 and possibly earlier versions a race condition vulnerability exists in the sound system, this can lead to a deadlock and denial of service condition."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "USN-3631-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3631-2/"
            },
            {
              "name": "DSA-4187",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4187"
            },
            {
              "name": "USN-3631-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3631-1/"
            },
            {
              "name": "RHSA-2018:2390",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2390"
            },
            {
              "name": "104606",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/104606"
            },
            {
              "name": "RHSA-2018:1062",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1062"
            },
            {
              "name": "RHSA-2018:0654",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0654"
            },
            {
              "name": "RHSA-2018:0676",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0676"
            },
            {
              "name": "[oss-security] 20180116 sound driver Conditional competition",
              "refsource": "MLIST",
              "url": "http://seclists.org/oss-sec/2018/q1/51"
            },
            {
              "name": "[debian-lts-announce] 20180502 [SECURITY] [DLA 1369-1] linux security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html"
            },
            {
              "name": "USN-3798-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3798-1/"
            },
            {
              "name": "USN-3798-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3798-2/"
            },
            {
              "name": "RHSA-2019:1483",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1483"
            },
            {
              "name": "https://www.oracle.com/security-alerts/cpujul2020.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/security-alerts/cpujul2020.html"
            },
            {
              "name": "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html"
            },
            {
              "name": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0",
              "refsource": "CONFIRM",
              "url": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-1000004",
    "datePublished": "2018-01-16T20:00:00",
    "dateReserved": "2018-01-16T00:00:00",
    "dateUpdated": "2024-08-05T12:33:48.504Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2017-17448

Vulnerability from cvelistv5

Published

2017-12-07 00:00

Modified

2024-08-05 20:51

Severity

Summary

net/netfilter/nfnetlink_cthelper.c in the Linux kernel through 4.14.4 does not require the CAP_NET_ADMIN capability for new, get, and del operations, which allows local users to bypass intended access restrictions because the nfnl_cthelper_list data structure is shared across all net namespaces.

References

URL	Tags
https://patchwork.kernel.org/patch/10089373/	x_refsource_MISC
https://usn.ubuntu.com/3617-1/	vendor-advisory, x_refsource_UBUNTU
https://usn.ubuntu.com/3619-2/	vendor-advisory, x_refsource_UBUNTU
https://www.debian.org/security/2018/dsa-4082	vendor-advisory, x_refsource_DEBIAN
https://usn.ubuntu.com/3617-3/	vendor-advisory, x_refsource_UBUNTU
https://usn.ubuntu.com/3632-1/	vendor-advisory, x_refsource_UBUNTU
https://usn.ubuntu.com/3620-2/	vendor-advisory, x_refsource_UBUNTU
https://access.redhat.com/errata/RHSA-2018:1062	vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:0654	vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:0676	vendor-advisory, x_refsource_REDHAT
https://www.debian.org/security/2017/dsa-4073	vendor-advisory, x_refsource_DEBIAN
https://usn.ubuntu.com/3617-2/	vendor-advisory, x_refsource_UBUNTU
http://www.securityfocus.com/bid/102117	vdb-entry, x_refsource_BID
https://usn.ubuntu.com/3620-1/	vendor-advisory, x_refsource_UBUNTU
https://usn.ubuntu.com/3619-1/	vendor-advisory, x_refsource_UBUNTU

Impacted products

Vendor	Product
n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T20:51:31.383Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://patchwork.kernel.org/patch/10089373/"
          },
          {
            "name": "USN-3617-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3617-1/"
          },
          {
            "name": "USN-3619-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3619-2/"
          },
          {
            "name": "DSA-4082",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4082"
          },
          {
            "name": "USN-3617-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3617-3/"
          },
          {
            "name": "USN-3632-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3632-1/"
          },
          {
            "name": "USN-3620-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3620-2/"
          },
          {
            "name": "RHSA-2018:1062",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1062"
          },
          {
            "name": "RHSA-2018:0654",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0654"
          },
          {
            "name": "RHSA-2018:0676",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0676"
          },
          {
            "name": "DSA-4073",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-4073"
          },
          {
            "name": "USN-3617-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3617-2/"
          },
          {
            "name": "102117",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/102117"
          },
          {
            "name": "USN-3620-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3620-1/"
          },
          {
            "name": "USN-3619-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3619-1/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-12-06T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "net/netfilter/nfnetlink_cthelper.c in the Linux kernel through 4.14.4 does not require the CAP_NET_ADMIN capability for new, get, and del operations, which allows local users to bypass intended access restrictions because the nfnl_cthelper_list data structure is shared across all net namespaces."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-04-24T09:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://patchwork.kernel.org/patch/10089373/"
        },
        {
          "name": "USN-3617-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3617-1/"
        },
        {
          "name": "USN-3619-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3619-2/"
        },
        {
          "name": "DSA-4082",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4082"
        },
        {
          "name": "USN-3617-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3617-3/"
        },
        {
          "name": "USN-3632-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3632-1/"
        },
        {
          "name": "USN-3620-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3620-2/"
        },
        {
          "name": "RHSA-2018:1062",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1062"
        },
        {
          "name": "RHSA-2018:0654",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0654"
        },
        {
          "name": "RHSA-2018:0676",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0676"
        },
        {
          "name": "DSA-4073",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-4073"
        },
        {
          "name": "USN-3617-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3617-2/"
        },
        {
          "name": "102117",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/102117"
        },
        {
          "name": "USN-3620-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3620-1/"
        },
        {
          "name": "USN-3619-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3619-1/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-17448",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "net/netfilter/nfnetlink_cthelper.c in the Linux kernel through 4.14.4 does not require the CAP_NET_ADMIN capability for new, get, and del operations, which allows local users to bypass intended access restrictions because the nfnl_cthelper_list data structure is shared across all net namespaces."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://patchwork.kernel.org/patch/10089373/",
              "refsource": "MISC",
              "url": "https://patchwork.kernel.org/patch/10089373/"
            },
            {
              "name": "USN-3617-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3617-1/"
            },
            {
              "name": "USN-3619-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3619-2/"
            },
            {
              "name": "DSA-4082",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4082"
            },
            {
              "name": "USN-3617-3",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3617-3/"
            },
            {
              "name": "USN-3632-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3632-1/"
            },
            {
              "name": "USN-3620-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3620-2/"
            },
            {
              "name": "RHSA-2018:1062",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1062"
            },
            {
              "name": "RHSA-2018:0654",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0654"
            },
            {
              "name": "RHSA-2018:0676",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0676"
            },
            {
              "name": "DSA-4073",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-4073"
            },
            {
              "name": "USN-3617-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3617-2/"
            },
            {
              "name": "102117",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/102117"
            },
            {
              "name": "USN-3620-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3620-1/"
            },
            {
              "name": "USN-3619-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3619-1/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2017-17448",
    "datePublished": "2017-12-07T00:00:00",
    "dateReserved": "2017-12-06T00:00:00",
    "dateUpdated": "2024-08-05T20:51:31.383Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2017-15121

Vulnerability from cvelistv5

Published

2017-12-06 16:00

Modified

2024-08-05 19:50

Severity

Summary

A non-privileged user is able to mount a fuse filesystem on RHEL 6 or 7 and crash a system if an application punches a hole in a file that does not end aligned to a page boundary.

References

URL	Tags
https://bugzilla.redhat.com/show_bug.cgi?id=1520893	x_refsource_CONFIRM
https://access.redhat.com/errata/RHSA-2018:1854	vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:1062	vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:0676	vendor-advisory, x_refsource_REDHAT
http://www.securityfocus.com/bid/102128	vdb-entry, x_refsource_BID
https://support.f5.com/csp/article/K42142782?utm_source=f5support&amp%3Butm_medium=RSS	x_refsource_CONFIRM

Impacted products

Vendor	Product
Red Hat, Inc.	Red Hat Enterprise Linux

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T19:50:16.100Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1520893"
          },
          {
            "name": "RHSA-2018:1854",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1854"
          },
          {
            "name": "RHSA-2018:1062",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1062"
          },
          {
            "name": "RHSA-2018:0676",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0676"
          },
          {
            "name": "102128",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/102128"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.f5.com/csp/article/K42142782?utm_source=f5support\u0026amp%3Butm_medium=RSS"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Red Hat Enterprise Linux",
          "vendor": "Red Hat, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "6, 7"
            }
          ]
        }
      ],
      "datePublic": "2017-12-05T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A non-privileged user is able to mount a fuse filesystem on RHEL 6 or 7 and crash a system if an application punches a hole in a file that does not end aligned to a page boundary."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-20",
              "description": "CWE-20",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-10-09T19:07:33",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1520893"
        },
        {
          "name": "RHSA-2018:1854",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1854"
        },
        {
          "name": "RHSA-2018:1062",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1062"
        },
        {
          "name": "RHSA-2018:0676",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0676"
        },
        {
          "name": "102128",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/102128"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.f5.com/csp/article/K42142782?utm_source=f5support\u0026amp%3Butm_medium=RSS"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2017-15121",
    "datePublished": "2017-12-06T16:00:00Z",
    "dateReserved": "2017-10-08T00:00:00",
    "dateUpdated": "2024-08-05T19:50:16.100Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2017-18203

Vulnerability from cvelistv5

Published

2018-02-27 20:00

Modified

2024-08-05 21:13

Severity

Summary

The dm_get_from_kobject function in drivers/md/dm.c in the Linux kernel before 4.14.3 allow local users to cause a denial of service (BUG) by leveraging a race condition with __dm_destroy during creation and removal of DM devices.

References

URL	Tags
https://www.debian.org/security/2018/dsa-4187	vendor-advisory, x_refsource_DEBIAN
https://usn.ubuntu.com/3619-2/	vendor-advisory, x_refsource_UBUNTU
http://www.securityfocus.com/bid/103184	vdb-entry, x_refsource_BID
https://github.com/torvalds/linux/commit/b9a41d21dceadf8104812626ef85dc56ee8a60ed	x_refsource_MISC
https://access.redhat.com/errata/RHSA-2018:1854	vendor-advisory, x_refsource_REDHAT
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.3	x_refsource_MISC
https://access.redhat.com/errata/RHSA-2018:1062	vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:0676	vendor-advisory, x_refsource_REDHAT
https://usn.ubuntu.com/3653-2/	vendor-advisory, x_refsource_UBUNTU
https://usn.ubuntu.com/3655-1/	vendor-advisory, x_refsource_UBUNTU
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b9a41d21dceadf8104812626ef85dc56ee8a60ed	x_refsource_MISC
https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html	mailing-list, x_refsource_MLIST
https://usn.ubuntu.com/3655-2/	vendor-advisory, x_refsource_UBUNTU
https://usn.ubuntu.com/3653-1/	vendor-advisory, x_refsource_UBUNTU
https://usn.ubuntu.com/3657-1/	vendor-advisory, x_refsource_UBUNTU
https://usn.ubuntu.com/3619-1/	vendor-advisory, x_refsource_UBUNTU
https://access.redhat.com/errata/RHSA-2019:4154	vendor-advisory, x_refsource_REDHAT

Impacted products

Vendor	Product
n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T21:13:49.101Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-4187",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4187"
          },
          {
            "name": "USN-3619-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3619-2/"
          },
          {
            "name": "103184",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/103184"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/b9a41d21dceadf8104812626ef85dc56ee8a60ed"
          },
          {
            "name": "RHSA-2018:1854",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1854"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.3"
          },
          {
            "name": "RHSA-2018:1062",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1062"
          },
          {
            "name": "RHSA-2018:0676",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0676"
          },
          {
            "name": "USN-3653-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3653-2/"
          },
          {
            "name": "USN-3655-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3655-1/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b9a41d21dceadf8104812626ef85dc56ee8a60ed"
          },
          {
            "name": "[debian-lts-announce] 20180502 [SECURITY] [DLA 1369-1] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html"
          },
          {
            "name": "USN-3655-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3655-2/"
          },
          {
            "name": "USN-3653-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3653-1/"
          },
          {
            "name": "USN-3657-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3657-1/"
          },
          {
            "name": "USN-3619-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3619-1/"
          },
          {
            "name": "RHSA-2019:4154",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:4154"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-02-27T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The dm_get_from_kobject function in drivers/md/dm.c in the Linux kernel before 4.14.3 allow local users to cause a denial of service (BUG) by leveraging a race condition with __dm_destroy during creation and removal of DM devices."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-12-10T15:06:25",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "DSA-4187",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4187"
        },
        {
          "name": "USN-3619-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3619-2/"
        },
        {
          "name": "103184",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/103184"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/torvalds/linux/commit/b9a41d21dceadf8104812626ef85dc56ee8a60ed"
        },
        {
          "name": "RHSA-2018:1854",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1854"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.3"
        },
        {
          "name": "RHSA-2018:1062",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1062"
        },
        {
          "name": "RHSA-2018:0676",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0676"
        },
        {
          "name": "USN-3653-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3653-2/"
        },
        {
          "name": "USN-3655-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3655-1/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b9a41d21dceadf8104812626ef85dc56ee8a60ed"
        },
        {
          "name": "[debian-lts-announce] 20180502 [SECURITY] [DLA 1369-1] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html"
        },
        {
          "name": "USN-3655-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3655-2/"
        },
        {
          "name": "USN-3653-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3653-1/"
        },
        {
          "name": "USN-3657-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3657-1/"
        },
        {
          "name": "USN-3619-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3619-1/"
        },
        {
          "name": "RHSA-2019:4154",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:4154"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-18203",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The dm_get_from_kobject function in drivers/md/dm.c in the Linux kernel before 4.14.3 allow local users to cause a denial of service (BUG) by leveraging a race condition with __dm_destroy during creation and removal of DM devices."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-4187",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4187"
            },
            {
              "name": "USN-3619-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3619-2/"
            },
            {
              "name": "103184",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/103184"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/b9a41d21dceadf8104812626ef85dc56ee8a60ed",
              "refsource": "MISC",
              "url": "https://github.com/torvalds/linux/commit/b9a41d21dceadf8104812626ef85dc56ee8a60ed"
            },
            {
              "name": "RHSA-2018:1854",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1854"
            },
            {
              "name": "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.3",
              "refsource": "MISC",
              "url": "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.3"
            },
            {
              "name": "RHSA-2018:1062",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1062"
            },
            {
              "name": "RHSA-2018:0676",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0676"
            },
            {
              "name": "USN-3653-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3653-2/"
            },
            {
              "name": "USN-3655-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3655-1/"
            },
            {
              "name": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b9a41d21dceadf8104812626ef85dc56ee8a60ed",
              "refsource": "MISC",
              "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b9a41d21dceadf8104812626ef85dc56ee8a60ed"
            },
            {
              "name": "[debian-lts-announce] 20180502 [SECURITY] [DLA 1369-1] linux security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html"
            },
            {
              "name": "USN-3655-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3655-2/"
            },
            {
              "name": "USN-3653-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3653-1/"
            },
            {
              "name": "USN-3657-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3657-1/"
            },
            {
              "name": "USN-3619-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3619-1/"
            },
            {
              "name": "RHSA-2019:4154",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:4154"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2017-18203",
    "datePublished": "2018-02-27T20:00:00",
    "dateReserved": "2018-02-27T00:00:00",
    "dateUpdated": "2024-08-05T21:13:49.101Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2017-15274

Vulnerability from cvelistv5

Published

2017-10-12 00:00

Modified

2024-08-05 19:50

Severity

Summary

security/keys/keyctl.c in the Linux kernel before 4.11.5 does not consider the case of a NULL payload in conjunction with a nonzero length value, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) via a crafted add_key or keyctl system call, a different vulnerability than CVE-2017-12192.

References

URL	Tags
https://github.com/torvalds/linux/commit/5649645d725c73df4302428ee4e02c869248b4c5	x_refsource_CONFIRM
https://patchwork.kernel.org/patch/9781573/	x_refsource_CONFIRM
https://usn.ubuntu.com/3583-2/	vendor-advisory, x_refsource_UBUNTU
http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.11.5	x_refsource_CONFIRM
https://usn.ubuntu.com/3583-1/	vendor-advisory, x_refsource_UBUNTU
http://www.securityfocus.com/bid/101292	vdb-entry, x_refsource_BID
https://bugzilla.suse.com/show_bug.cgi?id=1045327	x_refsource_CONFIRM
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5649645d725c73df4302428ee4e02c869248b4c5	x_refsource_CONFIRM
https://access.redhat.com/errata/RHSA-2019:1946	vendor-advisory, x_refsource_REDHAT

Impacted products

Vendor	Product
n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T19:50:16.470Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/5649645d725c73df4302428ee4e02c869248b4c5"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://patchwork.kernel.org/patch/9781573/"
          },
          {
            "name": "USN-3583-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3583-2/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.11.5"
          },
          {
            "name": "USN-3583-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3583-1/"
          },
          {
            "name": "101292",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/101292"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.suse.com/show_bug.cgi?id=1045327"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5649645d725c73df4302428ee4e02c869248b4c5"
          },
          {
            "name": "RHSA-2019:1946",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1946"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-10-11T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "security/keys/keyctl.c in the Linux kernel before 4.11.5 does not consider the case of a NULL payload in conjunction with a nonzero length value, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) via a crafted add_key or keyctl system call, a different vulnerability than CVE-2017-12192."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-07-30T12:06:06",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/torvalds/linux/commit/5649645d725c73df4302428ee4e02c869248b4c5"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://patchwork.kernel.org/patch/9781573/"
        },
        {
          "name": "USN-3583-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3583-2/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.11.5"
        },
        {
          "name": "USN-3583-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3583-1/"
        },
        {
          "name": "101292",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/101292"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.suse.com/show_bug.cgi?id=1045327"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5649645d725c73df4302428ee4e02c869248b4c5"
        },
        {
          "name": "RHSA-2019:1946",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1946"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-15274",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "security/keys/keyctl.c in the Linux kernel before 4.11.5 does not consider the case of a NULL payload in conjunction with a nonzero length value, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) via a crafted add_key or keyctl system call, a different vulnerability than CVE-2017-12192."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/torvalds/linux/commit/5649645d725c73df4302428ee4e02c869248b4c5",
              "refsource": "CONFIRM",
              "url": "https://github.com/torvalds/linux/commit/5649645d725c73df4302428ee4e02c869248b4c5"
            },
            {
              "name": "https://patchwork.kernel.org/patch/9781573/",
              "refsource": "CONFIRM",
              "url": "https://patchwork.kernel.org/patch/9781573/"
            },
            {
              "name": "USN-3583-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3583-2/"
            },
            {
              "name": "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.11.5",
              "refsource": "CONFIRM",
              "url": "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.11.5"
            },
            {
              "name": "USN-3583-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3583-1/"
            },
            {
              "name": "101292",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/101292"
            },
            {
              "name": "https://bugzilla.suse.com/show_bug.cgi?id=1045327",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.suse.com/show_bug.cgi?id=1045327"
            },
            {
              "name": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5649645d725c73df4302428ee4e02c869248b4c5",
              "refsource": "CONFIRM",
              "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5649645d725c73df4302428ee4e02c869248b4c5"
            },
            {
              "name": "RHSA-2019:1946",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1946"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2017-15274",
    "datePublished": "2017-10-12T00:00:00",
    "dateReserved": "2017-10-11T00:00:00",
    "dateUpdated": "2024-08-05T19:50:16.470Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2017-9725

Vulnerability from cvelistv5

Published

2017-09-21 15:00

Modified

2024-08-05 17:18

Severity

Summary

In all Qualcomm products with Android releases from CAF using the Linux kernel, during DMA allocation, due to wrong data type of size, allocation size gets truncated which makes allocation succeed when it should fail.

References

URL	Tags
https://source.android.com/security/bulletin/2017-09-01	x_refsource_CONFIRM
https://access.redhat.com/errata/RHSA-2018:1062	vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:0676	vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:1170	vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:1130	vendor-advisory, x_refsource_REDHAT
http://www.securityfocus.com/bid/100658	vdb-entry, x_refsource_BID

Impacted products

Vendor	Product
n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T17:18:01.629Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://source.android.com/security/bulletin/2017-09-01"
          },
          {
            "name": "RHSA-2018:1062",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1062"
          },
          {
            "name": "RHSA-2018:0676",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0676"
          },
          {
            "name": "RHSA-2018:1170",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1170"
          },
          {
            "name": "RHSA-2018:1130",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1130"
          },
          {
            "name": "100658",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/100658"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-09-05T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In all Qualcomm products with Android releases from CAF using the Linux kernel, during DMA allocation, due to wrong data type of size, allocation size gets truncated which makes allocation succeed when it should fail."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-04-18T09:57:01",
        "orgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f",
        "shortName": "qualcomm"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://source.android.com/security/bulletin/2017-09-01"
        },
        {
          "name": "RHSA-2018:1062",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1062"
        },
        {
          "name": "RHSA-2018:0676",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0676"
        },
        {
          "name": "RHSA-2018:1170",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1170"
        },
        {
          "name": "RHSA-2018:1130",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1130"
        },
        {
          "name": "100658",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/100658"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "product-security@qualcomm.com",
          "ID": "CVE-2017-9725",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In all Qualcomm products with Android releases from CAF using the Linux kernel, during DMA allocation, due to wrong data type of size, allocation size gets truncated which makes allocation succeed when it should fail."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://source.android.com/security/bulletin/2017-09-01",
              "refsource": "CONFIRM",
              "url": "https://source.android.com/security/bulletin/2017-09-01"
            },
            {
              "name": "RHSA-2018:1062",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1062"
            },
            {
              "name": "RHSA-2018:0676",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0676"
            },
            {
              "name": "RHSA-2018:1170",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1170"
            },
            {
              "name": "RHSA-2018:1130",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1130"
            },
            {
              "name": "100658",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/100658"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f",
    "assignerShortName": "qualcomm",
    "cveId": "CVE-2017-9725",
    "datePublished": "2017-09-21T15:00:00",
    "dateReserved": "2017-06-15T00:00:00",
    "dateUpdated": "2024-08-05T17:18:01.629Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2017-18017

Vulnerability from cvelistv5

Published

2018-01-03 06:00

Modified

2024-08-05 21:06

Severity

Summary

The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service (use-after-free and memory corruption) or possibly have unspecified other impact by leveraging the presence of xt_TCPMSS in an iptables action.

References

URL	Tags
https://www.debian.org/security/2018/dsa-4187	vendor-advisory, x_refsource_DEBIAN
https://usn.ubuntu.com/3583-2/	vendor-advisory, x_refsource_UBUNTU
http://patchwork.ozlabs.org/patch/746618/	x_refsource_MISC
https://access.redhat.com/errata/RHSA-2018:1737	vendor-advisory, x_refsource_REDHAT
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.36	x_refsource_MISC
https://lkml.org/lkml/2017/4/2/13	x_refsource_MISC
https://access.redhat.com/errata/RHSA-2018:1062	vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:1319	vendor-advisory, x_refsource_REDHAT
https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0	x_refsource_CONFIRM
https://usn.ubuntu.com/3583-1/	vendor-advisory, x_refsource_UBUNTU
https://access.redhat.com/errata/RHSA-2018:0676	vendor-advisory, x_refsource_REDHAT
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1739765	x_refsource_MISC
https://github.com/torvalds/linux/commit/2638fd0f92d4397884fd991d8f4925cb3f081901	x_refsource_MISC
https://access.redhat.com/errata/RHSA-2018:1170	vendor-advisory, x_refsource_REDHAT
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2638fd0f92d4397884fd991d8f4925cb3f081901	x_refsource_MISC
https://access.redhat.com/errata/RHSA-2018:1130	vendor-advisory, x_refsource_REDHAT
https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html	mailing-list, x_refsource_MLIST
http://www.securityfocus.com/bid/102367	vdb-entry, x_refsource_BID
http://lists.opensuse.org/opensuse-security-announce/2018-03/msg00067.html	vendor-advisory, x_refsource_SUSE
http://lists.opensuse.org/opensuse-security-announce/2018-03/msg00072.html	vendor-advisory, x_refsource_SUSE
http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00008.html	vendor-advisory, x_refsource_SUSE
http://www.ubuntu.com/usn/USN-3583-1	vendor-advisory, x_refsource_UBUNTU
https://support.f5.com/csp/article/K18352029	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00047.html	vendor-advisory, x_refsource_SUSE
http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00013.html	vendor-advisory, x_refsource_SUSE
http://lists.opensuse.org/opensuse-security-announce/2018-04/msg00014.html	vendor-advisory, x_refsource_SUSE
http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00015.html	vendor-advisory, x_refsource_SUSE
http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00038.html	vendor-advisory, x_refsource_SUSE
http://lists.opensuse.org/opensuse-security-announce/2018-03/msg00070.html	vendor-advisory, x_refsource_SUSE
http://www.ubuntu.com/usn/USN-3583-2	vendor-advisory, x_refsource_UBUNTU
http://lists.opensuse.org/opensuse-security-announce/2018-03/msg00030.html	vendor-advisory, x_refsource_SUSE
https://www.arista.com/en/support/advisories-notices/security-advisories/4577-security-advisory-34	x_refsource_MISC

Impacted products

Vendor	Product
n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T21:06:50.145Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-4187",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4187"
          },
          {
            "name": "USN-3583-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3583-2/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://patchwork.ozlabs.org/patch/746618/"
          },
          {
            "name": "RHSA-2018:1737",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1737"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.36"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://lkml.org/lkml/2017/4/2/13"
          },
          {
            "name": "RHSA-2018:1062",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1062"
          },
          {
            "name": "RHSA-2018:1319",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1319"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0"
          },
          {
            "name": "USN-3583-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3583-1/"
          },
          {
            "name": "RHSA-2018:0676",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0676"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1739765"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/2638fd0f92d4397884fd991d8f4925cb3f081901"
          },
          {
            "name": "RHSA-2018:1170",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1170"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2638fd0f92d4397884fd991d8f4925cb3f081901"
          },
          {
            "name": "RHSA-2018:1130",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1130"
          },
          {
            "name": "[debian-lts-announce] 20180502 [SECURITY] [DLA 1369-1] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html"
          },
          {
            "name": "102367",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/102367"
          },
          {
            "name": "SUSE-SU-2018:0834",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2018-03/msg00067.html"
          },
          {
            "name": "SUSE-SU-2018:0848",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2018-03/msg00072.html"
          },
          {
            "name": "SUSE-SU-2018:0383",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00008.html"
          },
          {
            "name": "USN-3583-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-3583-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.f5.com/csp/article/K18352029"
          },
          {
            "name": "SUSE-SU-2018:0555",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00047.html"
          },
          {
            "name": "openSUSE-SU-2018:0408",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00013.html"
          },
          {
            "name": "SUSE-SU-2018:0986",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2018-04/msg00014.html"
          },
          {
            "name": "SUSE-SU-2018:0416",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00015.html"
          },
          {
            "name": "SUSE-SU-2018:0482",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00038.html"
          },
          {
            "name": "SUSE-SU-2018:0841",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2018-03/msg00070.html"
          },
          {
            "name": "USN-3583-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-3583-2"
          },
          {
            "name": "SUSE-SU-2018:0660",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2018-03/msg00030.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.arista.com/en/support/advisories-notices/security-advisories/4577-security-advisory-34"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-01-03T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service (use-after-free and memory corruption) or possibly have unspecified other impact by leveraging the presence of xt_TCPMSS in an iptables action."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-11-08T11:33:02",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "DSA-4187",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4187"
        },
        {
          "name": "USN-3583-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3583-2/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://patchwork.ozlabs.org/patch/746618/"
        },
        {
          "name": "RHSA-2018:1737",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1737"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.36"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://lkml.org/lkml/2017/4/2/13"
        },
        {
          "name": "RHSA-2018:1062",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1062"
        },
        {
          "name": "RHSA-2018:1319",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1319"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0"
        },
        {
          "name": "USN-3583-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3583-1/"
        },
        {
          "name": "RHSA-2018:0676",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0676"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1739765"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/torvalds/linux/commit/2638fd0f92d4397884fd991d8f4925cb3f081901"
        },
        {
          "name": "RHSA-2018:1170",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1170"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2638fd0f92d4397884fd991d8f4925cb3f081901"
        },
        {
          "name": "RHSA-2018:1130",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1130"
        },
        {
          "name": "[debian-lts-announce] 20180502 [SECURITY] [DLA 1369-1] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html"
        },
        {
          "name": "102367",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/102367"
        },
        {
          "name": "SUSE-SU-2018:0834",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2018-03/msg00067.html"
        },
        {
          "name": "SUSE-SU-2018:0848",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2018-03/msg00072.html"
        },
        {
          "name": "SUSE-SU-2018:0383",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00008.html"
        },
        {
          "name": "USN-3583-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-3583-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.f5.com/csp/article/K18352029"
        },
        {
          "name": "SUSE-SU-2018:0555",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00047.html"
        },
        {
          "name": "openSUSE-SU-2018:0408",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00013.html"
        },
        {
          "name": "SUSE-SU-2018:0986",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2018-04/msg00014.html"
        },
        {
          "name": "SUSE-SU-2018:0416",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00015.html"
        },
        {
          "name": "SUSE-SU-2018:0482",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00038.html"
        },
        {
          "name": "SUSE-SU-2018:0841",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2018-03/msg00070.html"
        },
        {
          "name": "USN-3583-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-3583-2"
        },
        {
          "name": "SUSE-SU-2018:0660",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2018-03/msg00030.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.arista.com/en/support/advisories-notices/security-advisories/4577-security-advisory-34"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-18017",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service (use-after-free and memory corruption) or possibly have unspecified other impact by leveraging the presence of xt_TCPMSS in an iptables action."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-4187",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4187"
            },
            {
              "name": "USN-3583-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3583-2/"
            },
            {
              "name": "http://patchwork.ozlabs.org/patch/746618/",
              "refsource": "MISC",
              "url": "http://patchwork.ozlabs.org/patch/746618/"
            },
            {
              "name": "RHSA-2018:1737",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1737"
            },
            {
              "name": "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.36",
              "refsource": "MISC",
              "url": "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.36"
            },
            {
              "name": "https://lkml.org/lkml/2017/4/2/13",
              "refsource": "MISC",
              "url": "https://lkml.org/lkml/2017/4/2/13"
            },
            {
              "name": "RHSA-2018:1062",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1062"
            },
            {
              "name": "RHSA-2018:1319",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1319"
            },
            {
              "name": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0",
              "refsource": "CONFIRM",
              "url": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0"
            },
            {
              "name": "USN-3583-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3583-1/"
            },
            {
              "name": "RHSA-2018:0676",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0676"
            },
            {
              "name": "https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1739765",
              "refsource": "MISC",
              "url": "https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1739765"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/2638fd0f92d4397884fd991d8f4925cb3f081901",
              "refsource": "MISC",
              "url": "https://github.com/torvalds/linux/commit/2638fd0f92d4397884fd991d8f4925cb3f081901"
            },
            {
              "name": "RHSA-2018:1170",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1170"
            },
            {
              "name": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2638fd0f92d4397884fd991d8f4925cb3f081901",
              "refsource": "MISC",
              "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2638fd0f92d4397884fd991d8f4925cb3f081901"
            },
            {
              "name": "RHSA-2018:1130",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1130"
            },
            {
              "name": "[debian-lts-announce] 20180502 [SECURITY] [DLA 1369-1] linux security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html"
            },
            {
              "name": "102367",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/102367"
            },
            {
              "name": "SUSE-SU-2018:0834",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2018-03/msg00067.html"
            },
            {
              "name": "SUSE-SU-2018:0848",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2018-03/msg00072.html"
            },
            {
              "name": "SUSE-SU-2018:0383",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00008.html"
            },
            {
              "name": "USN-3583-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-3583-1"
            },
            {
              "name": "https://support.f5.com/csp/article/K18352029",
              "refsource": "CONFIRM",
              "url": "https://support.f5.com/csp/article/K18352029"
            },
            {
              "name": "SUSE-SU-2018:0555",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00047.html"
            },
            {
              "name": "openSUSE-SU-2018:0408",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00013.html"
            },
            {
              "name": "SUSE-SU-2018:0986",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2018-04/msg00014.html"
            },
            {
              "name": "SUSE-SU-2018:0416",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00015.html"
            },
            {
              "name": "SUSE-SU-2018:0482",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00038.html"
            },
            {
              "name": "SUSE-SU-2018:0841",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2018-03/msg00070.html"
            },
            {
              "name": "USN-3583-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-3583-2"
            },
            {
              "name": "SUSE-SU-2018:0660",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2018-03/msg00030.html"
            },
            {
              "name": "https://www.arista.com/en/support/advisories-notices/security-advisories/4577-security-advisory-34",
              "refsource": "MISC",
              "url": "https://www.arista.com/en/support/advisories-notices/security-advisories/4577-security-advisory-34"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2017-18017",
    "datePublished": "2018-01-03T06:00:00",
    "dateReserved": "2018-01-03T00:00:00",
    "dateUpdated": "2024-08-05T21:06:50.145Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2017-12154

Vulnerability from cvelistv5

Published

2017-09-26 05:00

Modified

2024-08-05 18:28

Severity

Summary

The prepare_vmcs02 function in arch/x86/kvm/vmx.c in the Linux kernel through 4.13.3 does not ensure that the "CR8-load exiting" and "CR8-store exiting" L0 vmcs02 controls exist in cases where L1 omits the "use TPR shadow" vmcs12 control, which allows KVM L2 guest OS users to obtain read and write access to the hardware CR8 register.

References

URL	Tags
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=51aa68e7d57e3217192d88ce90fd5b8ef29ec94f	x_refsource_CONFIRM
https://bugzilla.redhat.com/show_bug.cgi?id=1491224	x_refsource_CONFIRM
https://access.redhat.com/errata/RHSA-2018:1062	vendor-advisory, x_refsource_REDHAT
http://www.securityfocus.com/bid/100856	vdb-entry, x_refsource_BID
http://www.debian.org/security/2017/dsa-3981	vendor-advisory, x_refsource_DEBIAN
https://www.spinics.net/lists/kvm/msg155414.html	x_refsource_CONFIRM
https://access.redhat.com/errata/RHSA-2018:0676	vendor-advisory, x_refsource_REDHAT
https://usn.ubuntu.com/3698-1/	vendor-advisory, x_refsource_UBUNTU
https://github.com/torvalds/linux/commit/51aa68e7d57e3217192d88ce90fd5b8ef29ec94f	x_refsource_CONFIRM
https://usn.ubuntu.com/3698-2/	vendor-advisory, x_refsource_UBUNTU
https://access.redhat.com/errata/RHSA-2019:1946	vendor-advisory, x_refsource_REDHAT

Impacted products

Vendor	Product
n/a	Linux kernel through 4.13.3

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T18:28:16.642Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=51aa68e7d57e3217192d88ce90fd5b8ef29ec94f"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1491224"
          },
          {
            "name": "RHSA-2018:1062",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1062"
          },
          {
            "name": "100856",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/100856"
          },
          {
            "name": "DSA-3981",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3981"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.spinics.net/lists/kvm/msg155414.html"
          },
          {
            "name": "RHSA-2018:0676",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0676"
          },
          {
            "name": "USN-3698-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3698-1/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/51aa68e7d57e3217192d88ce90fd5b8ef29ec94f"
          },
          {
            "name": "USN-3698-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3698-2/"
          },
          {
            "name": "RHSA-2019:1946",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1946"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Linux kernel through 4.13.3",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Linux kernel through 4.13.3"
            }
          ]
        }
      ],
      "datePublic": "2017-09-26T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The prepare_vmcs02 function in arch/x86/kvm/vmx.c in the Linux kernel through 4.13.3 does not ensure that the \"CR8-load exiting\" and \"CR8-store exiting\" L0 vmcs02 controls exist in cases where L1 omits the \"use TPR shadow\" vmcs12 control, which allows KVM L2 guest OS users to obtain read and write access to the hardware CR8 register."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "incorrect access control",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-07-30T12:06:06",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=51aa68e7d57e3217192d88ce90fd5b8ef29ec94f"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1491224"
        },
        {
          "name": "RHSA-2018:1062",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1062"
        },
        {
          "name": "100856",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/100856"
        },
        {
          "name": "DSA-3981",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3981"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.spinics.net/lists/kvm/msg155414.html"
        },
        {
          "name": "RHSA-2018:0676",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0676"
        },
        {
          "name": "USN-3698-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3698-1/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/torvalds/linux/commit/51aa68e7d57e3217192d88ce90fd5b8ef29ec94f"
        },
        {
          "name": "USN-3698-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3698-2/"
        },
        {
          "name": "RHSA-2019:1946",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1946"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2017-12154",
    "datePublished": "2017-09-26T05:00:00",
    "dateReserved": "2017-08-01T00:00:00",
    "dateUpdated": "2024-08-05T18:28:16.642Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2017-17449

Vulnerability from cvelistv5

Published

2017-12-07 00:00

Modified

2024-08-05 20:51

Severity

Summary

The __netlink_deliver_tap_skb function in net/netlink/af_netlink.c in the Linux kernel through 4.14.4, when CONFIG_NLMON is enabled, does not restrict observations of Netlink messages to a single net namespace, which allows local users to obtain sensitive information by leveraging the CAP_NET_ADMIN capability to sniff an nlmon interface for all Netlink activity on the system.

References

URL	Tags
https://usn.ubuntu.com/3619-2/	vendor-advisory, x_refsource_UBUNTU
https://www.debian.org/security/2018/dsa-4082	vendor-advisory, x_refsource_DEBIAN
https://lkml.org/lkml/2017/12/5/950	x_refsource_MISC
http://www.securityfocus.com/bid/102122	vdb-entry, x_refsource_BID
https://access.redhat.com/errata/RHSA-2018:1062	vendor-advisory, x_refsource_REDHAT
https://source.android.com/security/bulletin/pixel/2018-04-01	x_refsource_CONFIRM
https://access.redhat.com/errata/RHSA-2018:0654	vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:0676	vendor-advisory, x_refsource_REDHAT
https://usn.ubuntu.com/3653-2/	vendor-advisory, x_refsource_UBUNTU
https://usn.ubuntu.com/3655-1/	vendor-advisory, x_refsource_UBUNTU
https://access.redhat.com/errata/RHSA-2018:1170	vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:1130	vendor-advisory, x_refsource_REDHAT
https://www.debian.org/security/2017/dsa-4073	vendor-advisory, x_refsource_DEBIAN
https://usn.ubuntu.com/3655-2/	vendor-advisory, x_refsource_UBUNTU
https://usn.ubuntu.com/3653-1/	vendor-advisory, x_refsource_UBUNTU
https://usn.ubuntu.com/3657-1/	vendor-advisory, x_refsource_UBUNTU
https://usn.ubuntu.com/3619-1/	vendor-advisory, x_refsource_UBUNTU

Impacted products

Vendor	Product
n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T20:51:31.636Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "USN-3619-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3619-2/"
          },
          {
            "name": "DSA-4082",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4082"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://lkml.org/lkml/2017/12/5/950"
          },
          {
            "name": "102122",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/102122"
          },
          {
            "name": "RHSA-2018:1062",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1062"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://source.android.com/security/bulletin/pixel/2018-04-01"
          },
          {
            "name": "RHSA-2018:0654",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0654"
          },
          {
            "name": "RHSA-2018:0676",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0676"
          },
          {
            "name": "USN-3653-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3653-2/"
          },
          {
            "name": "USN-3655-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3655-1/"
          },
          {
            "name": "RHSA-2018:1170",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1170"
          },
          {
            "name": "RHSA-2018:1130",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1130"
          },
          {
            "name": "DSA-4073",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-4073"
          },
          {
            "name": "USN-3655-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3655-2/"
          },
          {
            "name": "USN-3653-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3653-1/"
          },
          {
            "name": "USN-3657-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3657-1/"
          },
          {
            "name": "USN-3619-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3619-1/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-12-06T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The __netlink_deliver_tap_skb function in net/netlink/af_netlink.c in the Linux kernel through 4.14.4, when CONFIG_NLMON is enabled, does not restrict observations of Netlink messages to a single net namespace, which allows local users to obtain sensitive information by leveraging the CAP_NET_ADMIN capability to sniff an nlmon interface for all Netlink activity on the system."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-05-30T09:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "USN-3619-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3619-2/"
        },
        {
          "name": "DSA-4082",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4082"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://lkml.org/lkml/2017/12/5/950"
        },
        {
          "name": "102122",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/102122"
        },
        {
          "name": "RHSA-2018:1062",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1062"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://source.android.com/security/bulletin/pixel/2018-04-01"
        },
        {
          "name": "RHSA-2018:0654",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0654"
        },
        {
          "name": "RHSA-2018:0676",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0676"
        },
        {
          "name": "USN-3653-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3653-2/"
        },
        {
          "name": "USN-3655-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3655-1/"
        },
        {
          "name": "RHSA-2018:1170",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1170"
        },
        {
          "name": "RHSA-2018:1130",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1130"
        },
        {
          "name": "DSA-4073",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-4073"
        },
        {
          "name": "USN-3655-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3655-2/"
        },
        {
          "name": "USN-3653-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3653-1/"
        },
        {
          "name": "USN-3657-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3657-1/"
        },
        {
          "name": "USN-3619-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3619-1/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-17449",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The __netlink_deliver_tap_skb function in net/netlink/af_netlink.c in the Linux kernel through 4.14.4, when CONFIG_NLMON is enabled, does not restrict observations of Netlink messages to a single net namespace, which allows local users to obtain sensitive information by leveraging the CAP_NET_ADMIN capability to sniff an nlmon interface for all Netlink activity on the system."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "USN-3619-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3619-2/"
            },
            {
              "name": "DSA-4082",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4082"
            },
            {
              "name": "https://lkml.org/lkml/2017/12/5/950",
              "refsource": "MISC",
              "url": "https://lkml.org/lkml/2017/12/5/950"
            },
            {
              "name": "102122",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/102122"
            },
            {
              "name": "RHSA-2018:1062",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1062"
            },
            {
              "name": "https://source.android.com/security/bulletin/pixel/2018-04-01",
              "refsource": "CONFIRM",
              "url": "https://source.android.com/security/bulletin/pixel/2018-04-01"
            },
            {
              "name": "RHSA-2018:0654",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0654"
            },
            {
              "name": "RHSA-2018:0676",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0676"
            },
            {
              "name": "USN-3653-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3653-2/"
            },
            {
              "name": "USN-3655-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3655-1/"
            },
            {
              "name": "RHSA-2018:1170",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1170"
            },
            {
              "name": "RHSA-2018:1130",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1130"
            },
            {
              "name": "DSA-4073",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-4073"
            },
            {
              "name": "USN-3655-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3655-2/"
            },
            {
              "name": "USN-3653-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3653-1/"
            },
            {
              "name": "USN-3657-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3657-1/"
            },
            {
              "name": "USN-3619-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3619-1/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2017-17449",
    "datePublished": "2017-12-07T00:00:00",
    "dateReserved": "2017-12-06T00:00:00",
    "dateUpdated": "2024-08-05T20:51:31.636Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2017-1000252

Vulnerability from cvelistv5

Published

2017-09-26 05:00

Modified

2024-08-05 22:00

Severity

Summary

The KVM subsystem in the Linux kernel through 4.13.3 allows guest OS users to cause a denial of service (assertion failure, and hypervisor hang or crash) via an out-of bounds guest_irq value, related to arch/x86/kvm/vmx.c and virt/kvm/eventfd.c.

References

URL	Tags
http://www.securityfocus.com/bid/101022	vdb-entry, x_refsource_BID
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=36ae3c0a36b7456432fedce38ae2f7bd3e01a563	x_refsource_CONFIRM
https://github.com/torvalds/linux/commit/3a8b0677fc6180a467e26cc32ce6b0c09a32f9bb	x_refsource_CONFIRM
https://access.redhat.com/errata/RHSA-2018:1062	vendor-advisory, x_refsource_REDHAT
http://www.debian.org/security/2017/dsa-3981	vendor-advisory, x_refsource_DEBIAN
https://marc.info/?l=kvm&m=150549146311117&w=2	x_refsource_CONFIRM
https://access.redhat.com/errata/RHSA-2018:0676	vendor-advisory, x_refsource_REDHAT
https://github.com/torvalds/linux/commit/36ae3c0a36b7456432fedce38ae2f7bd3e01a563	x_refsource_CONFIRM
https://marc.info/?l=kvm&m=150549145711115&w=2	x_refsource_CONFIRM
https://access.redhat.com/errata/RHSA-2018:1130	vendor-advisory, x_refsource_REDHAT
http://www.openwall.com/lists/oss-security/2017/09/15/4	x_refsource_CONFIRM
https://bugzilla.redhat.com/show_bug.cgi?id=1490781	x_refsource_CONFIRM
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=3a8b0677fc6180a467e26cc32ce6b0c09a32f9bb	x_refsource_CONFIRM

Impacted products

Vendor	Product
n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T22:00:39.695Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "101022",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/101022"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=36ae3c0a36b7456432fedce38ae2f7bd3e01a563"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/3a8b0677fc6180a467e26cc32ce6b0c09a32f9bb"
          },
          {
            "name": "RHSA-2018:1062",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1062"
          },
          {
            "name": "DSA-3981",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3981"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://marc.info/?l=kvm\u0026m=150549146311117\u0026w=2"
          },
          {
            "name": "RHSA-2018:0676",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0676"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/36ae3c0a36b7456432fedce38ae2f7bd3e01a563"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://marc.info/?l=kvm\u0026m=150549145711115\u0026w=2"
          },
          {
            "name": "RHSA-2018:1130",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1130"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2017/09/15/4"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490781"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=3a8b0677fc6180a467e26cc32ce6b0c09a32f9bb"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-09-15T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The KVM subsystem in the Linux kernel through 4.13.3 allows guest OS users to cause a denial of service (assertion failure, and hypervisor hang or crash) via an out-of bounds guest_irq value, related to arch/x86/kvm/vmx.c and virt/kvm/eventfd.c."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-04-18T09:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "101022",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/101022"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=36ae3c0a36b7456432fedce38ae2f7bd3e01a563"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/torvalds/linux/commit/3a8b0677fc6180a467e26cc32ce6b0c09a32f9bb"
        },
        {
          "name": "RHSA-2018:1062",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1062"
        },
        {
          "name": "DSA-3981",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3981"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://marc.info/?l=kvm\u0026m=150549146311117\u0026w=2"
        },
        {
          "name": "RHSA-2018:0676",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0676"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/torvalds/linux/commit/36ae3c0a36b7456432fedce38ae2f7bd3e01a563"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://marc.info/?l=kvm\u0026m=150549145711115\u0026w=2"
        },
        {
          "name": "RHSA-2018:1130",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1130"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2017/09/15/4"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490781"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=3a8b0677fc6180a467e26cc32ce6b0c09a32f9bb"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-1000252",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The KVM subsystem in the Linux kernel through 4.13.3 allows guest OS users to cause a denial of service (assertion failure, and hypervisor hang or crash) via an out-of bounds guest_irq value, related to arch/x86/kvm/vmx.c and virt/kvm/eventfd.c."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "101022",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/101022"
            },
            {
              "name": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=36ae3c0a36b7456432fedce38ae2f7bd3e01a563",
              "refsource": "CONFIRM",
              "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=36ae3c0a36b7456432fedce38ae2f7bd3e01a563"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/3a8b0677fc6180a467e26cc32ce6b0c09a32f9bb",
              "refsource": "CONFIRM",
              "url": "https://github.com/torvalds/linux/commit/3a8b0677fc6180a467e26cc32ce6b0c09a32f9bb"
            },
            {
              "name": "RHSA-2018:1062",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1062"
            },
            {
              "name": "DSA-3981",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3981"
            },
            {
              "name": "https://marc.info/?l=kvm\u0026m=150549146311117\u0026w=2",
              "refsource": "CONFIRM",
              "url": "https://marc.info/?l=kvm\u0026m=150549146311117\u0026w=2"
            },
            {
              "name": "RHSA-2018:0676",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0676"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/36ae3c0a36b7456432fedce38ae2f7bd3e01a563",
              "refsource": "CONFIRM",
              "url": "https://github.com/torvalds/linux/commit/36ae3c0a36b7456432fedce38ae2f7bd3e01a563"
            },
            {
              "name": "https://marc.info/?l=kvm\u0026m=150549145711115\u0026w=2",
              "refsource": "CONFIRM",
              "url": "https://marc.info/?l=kvm\u0026m=150549145711115\u0026w=2"
            },
            {
              "name": "RHSA-2018:1130",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1130"
            },
            {
              "name": "http://www.openwall.com/lists/oss-security/2017/09/15/4",
              "refsource": "CONFIRM",
              "url": "http://www.openwall.com/lists/oss-security/2017/09/15/4"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1490781",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490781"
            },
            {
              "name": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=3a8b0677fc6180a467e26cc32ce6b0c09a32f9bb",
              "refsource": "CONFIRM",
              "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=3a8b0677fc6180a467e26cc32ce6b0c09a32f9bb"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2017-1000252",
    "datePublished": "2017-09-26T05:00:00",
    "dateReserved": "2017-09-26T00:00:00",
    "dateUpdated": "2024-08-05T22:00:39.695Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2016-8633

Vulnerability from cvelistv5

Published

2016-11-28 03:01

Modified

2024-08-06 02:27

Severity

Summary

drivers/firewire/net.c in the Linux kernel before 4.8.7, in certain unusual hardware configurations, allows remote attackers to execute arbitrary code via crafted fragmented packets.

References

URL	Tags
http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.7	x_refsource_CONFIRM
http://www.securityfocus.com/bid/94149	vdb-entry, x_refsource_BID
https://access.redhat.com/errata/RHSA-2018:1062	vendor-advisory, x_refsource_REDHAT
https://eyalitkin.wordpress.com/2016/11/06/cve-publication-cve-2016-8633/	x_refsource_MISC
https://access.redhat.com/errata/RHSA-2018:0676	vendor-advisory, x_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=1391490	x_refsource_CONFIRM
https://github.com/torvalds/linux/commit/667121ace9dbafb368618dbabcf07901c962ddac	x_refsource_CONFIRM
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=667121ace9dbafb368618dbabcf07901c962ddac	x_refsource_CONFIRM
http://www.openwall.com/lists/oss-security/2016/11/06/1	mailing-list, x_refsource_MLIST
https://access.redhat.com/errata/RHSA-2019:1170	vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:1190	vendor-advisory, x_refsource_REDHAT

Impacted products

Vendor	Product
n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T02:27:41.221Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.7"
          },
          {
            "name": "94149",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/94149"
          },
          {
            "name": "RHSA-2018:1062",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1062"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://eyalitkin.wordpress.com/2016/11/06/cve-publication-cve-2016-8633/"
          },
          {
            "name": "RHSA-2018:0676",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0676"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1391490"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/667121ace9dbafb368618dbabcf07901c962ddac"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=667121ace9dbafb368618dbabcf07901c962ddac"
          },
          {
            "name": "[oss-security] 20161106 Re: [engineering.redhat.com #426293] CVE Request - firewire driver RCE - linux 4.8",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/11/06/1"
          },
          {
            "name": "RHSA-2019:1170",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1170"
          },
          {
            "name": "RHSA-2019:1190",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1190"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-11-06T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "drivers/firewire/net.c in the Linux kernel before 4.8.7, in certain unusual hardware configurations, allows remote attackers to execute arbitrary code via crafted fragmented packets."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-05-14T22:06:08",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.7"
        },
        {
          "name": "94149",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/94149"
        },
        {
          "name": "RHSA-2018:1062",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1062"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://eyalitkin.wordpress.com/2016/11/06/cve-publication-cve-2016-8633/"
        },
        {
          "name": "RHSA-2018:0676",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0676"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1391490"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/torvalds/linux/commit/667121ace9dbafb368618dbabcf07901c962ddac"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=667121ace9dbafb368618dbabcf07901c962ddac"
        },
        {
          "name": "[oss-security] 20161106 Re: [engineering.redhat.com #426293] CVE Request - firewire driver RCE - linux 4.8",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/11/06/1"
        },
        {
          "name": "RHSA-2019:1170",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1170"
        },
        {
          "name": "RHSA-2019:1190",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1190"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2016-8633",
    "datePublished": "2016-11-28T03:01:00",
    "dateReserved": "2016-10-12T00:00:00",
    "dateUpdated": "2024-08-06T02:27:41.221Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2017-15127

Vulnerability from cvelistv5

Published

2018-01-14 06:00

Modified

2024-08-05 19:50

Severity

Summary

A flaw was found in the hugetlb_mcopy_atomic_pte function in mm/hugetlb.c in the Linux kernel before 4.13. A superfluous implicit page unlock for VM_SHARED hugetlbfs mapping could trigger a local denial of service (BUG).

References

URL	Tags
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5af10dfd0afc559bb4b0f7e3e8227a1578333995	x_refsource_MISC
https://access.redhat.com/errata/RHSA-2018:1062	vendor-advisory, x_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=1525218	x_refsource_MISC
https://access.redhat.com/errata/RHSA-2018:0676	vendor-advisory, x_refsource_REDHAT
https://github.com/torvalds/linux/commit/5af10dfd0afc559bb4b0f7e3e8227a1578333995	x_refsource_MISC
https://access.redhat.com/security/cve/CVE-2017-15127	x_refsource_MISC
http://www.securityfocus.com/bid/102517	vdb-entry, x_refsource_BID

Impacted products

Vendor	Product
n/a	Linux kernel before 4.13

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T19:50:16.370Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5af10dfd0afc559bb4b0f7e3e8227a1578333995"
          },
          {
            "name": "RHSA-2018:1062",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1062"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1525218"
          },
          {
            "name": "RHSA-2018:0676",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0676"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/5af10dfd0afc559bb4b0f7e3e8227a1578333995"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2017-15127"
          },
          {
            "name": "102517",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/102517"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Linux kernel before 4.13",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Linux kernel before 4.13"
            }
          ]
        }
      ],
      "datePublic": "2018-01-14T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in the hugetlb_mcopy_atomic_pte function in mm/hugetlb.c in the Linux kernel before 4.13. A superfluous implicit page unlock for VM_SHARED hugetlbfs mapping could trigger a local denial of service (BUG)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-460",
              "description": "CWE-460",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-05-03T09:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5af10dfd0afc559bb4b0f7e3e8227a1578333995"
        },
        {
          "name": "RHSA-2018:1062",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1062"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1525218"
        },
        {
          "name": "RHSA-2018:0676",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0676"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/torvalds/linux/commit/5af10dfd0afc559bb4b0f7e3e8227a1578333995"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2017-15127"
        },
        {
          "name": "102517",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/102517"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2017-15127",
    "datePublished": "2018-01-14T06:00:00",
    "dateReserved": "2017-10-08T00:00:00",
    "dateUpdated": "2024-08-05T19:50:16.370Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2017-13305

Vulnerability from cvelistv5

Published

2018-04-04 16:00

Modified

2024-09-16 18:13

Severity

Summary

A information disclosure vulnerability in the Upstream kernel encrypted-keys. Product: Android. Versions: Android kernel. Android ID: A-70526974.

References

URL	Tags
https://usn.ubuntu.com/3631-2/	vendor-advisory, x_refsource_UBUNTU
https://usn.ubuntu.com/3631-1/	vendor-advisory, x_refsource_UBUNTU
https://source.android.com/security/bulletin/pixel/2018-04-01	x_refsource_CONFIRM
https://access.redhat.com/errata/RHSA-2018:2165	vendor-advisory, x_refsource_REDHAT
https://usn.ubuntu.com/3655-1/	vendor-advisory, x_refsource_UBUNTU
https://usn.ubuntu.com/3655-2/	vendor-advisory, x_refsource_UBUNTU
https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html	mailing-list, x_refsource_MLIST
https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html	mailing-list, x_refsource_MLIST

Impacted products

Vendor	Product
Google Inc.	Android

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T19:05:18.897Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "USN-3631-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3631-2/"
          },
          {
            "name": "USN-3631-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3631-1/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://source.android.com/security/bulletin/pixel/2018-04-01"
          },
          {
            "name": "RHSA-2018:2165",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2165"
          },
          {
            "name": "USN-3655-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3655-1/"
          },
          {
            "name": "USN-3655-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3655-2/"
          },
          {
            "name": "[debian-lts-announce] 20190327 [SECURITY] [DLA 1731-1] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html"
          },
          {
            "name": "[debian-lts-announce] 20190401 [SECURITY] [DLA 1731-2] linux regression update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Android",
          "vendor": "Google Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "Android kernel"
            }
          ]
        }
      ],
      "datePublic": "2018-04-02T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A information disclosure vulnerability in the Upstream kernel encrypted-keys. Product: Android. Versions: Android kernel. Android ID: A-70526974."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Information disclosure",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-04-01T20:06:10",
        "orgId": "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6",
        "shortName": "google_android"
      },
      "references": [
        {
          "name": "USN-3631-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3631-2/"
        },
        {
          "name": "USN-3631-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3631-1/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://source.android.com/security/bulletin/pixel/2018-04-01"
        },
        {
          "name": "RHSA-2018:2165",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2165"
        },
        {
          "name": "USN-3655-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3655-1/"
        },
        {
          "name": "USN-3655-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3655-2/"
        },
        {
          "name": "[debian-lts-announce] 20190327 [SECURITY] [DLA 1731-1] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html"
        },
        {
          "name": "[debian-lts-announce] 20190401 [SECURITY] [DLA 1731-2] linux regression update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@android.com",
          "DATE_PUBLIC": "2018-04-02T00:00:00",
          "ID": "CVE-2017-13305",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Android",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Android kernel"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Google Inc."
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A information disclosure vulnerability in the Upstream kernel encrypted-keys. Product: Android. Versions: Android kernel. Android ID: A-70526974."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Information disclosure"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "USN-3631-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3631-2/"
            },
            {
              "name": "USN-3631-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3631-1/"
            },
            {
              "name": "https://source.android.com/security/bulletin/pixel/2018-04-01",
              "refsource": "CONFIRM",
              "url": "https://source.android.com/security/bulletin/pixel/2018-04-01"
            },
            {
              "name": "RHSA-2018:2165",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2165"
            },
            {
              "name": "USN-3655-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3655-1/"
            },
            {
              "name": "USN-3655-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3655-2/"
            },
            {
              "name": "[debian-lts-announce] 20190327 [SECURITY] [DLA 1731-1] linux security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html"
            },
            {
              "name": "[debian-lts-announce] 20190401 [SECURITY] [DLA 1731-2] linux regression update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6",
    "assignerShortName": "google_android",
    "cveId": "CVE-2017-13305",
    "datePublished": "2018-04-04T16:00:00Z",
    "dateReserved": "2017-08-23T00:00:00",
    "dateUpdated": "2024-09-16T18:13:39.183Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2017-17558

Vulnerability from cvelistv5

Published

2017-12-12 15:00

Modified

2024-08-05 20:51

Severity

Summary

The usb_destroy_configuration function in drivers/usb/core/config.c in the USB core subsystem in the Linux kernel through 4.14.5 does not consider the maximum number of configurations and interfaces before attempting to release resources, which allows local users to cause a denial of service (out-of-bounds write access) or possibly have unspecified other impact via a crafted USB device.

References

URL	Tags
https://usn.ubuntu.com/3619-2/	vendor-advisory, x_refsource_UBUNTU
https://www.debian.org/security/2018/dsa-4082	vendor-advisory, x_refsource_DEBIAN
https://lists.debian.org/debian-lts-announce/2018/01/msg00004.html	mailing-list, x_refsource_MLIST
http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html	vendor-advisory, x_refsource_SUSE
https://usn.ubuntu.com/3754-1/	vendor-advisory, x_refsource_UBUNTU
https://access.redhat.com/errata/RHSA-2018:1062	vendor-advisory, x_refsource_REDHAT
http://openwall.com/lists/oss-security/2017/12/12/7	x_refsource_MISC
https://access.redhat.com/errata/RHSA-2018:0676	vendor-advisory, x_refsource_REDHAT
https://www.debian.org/security/2017/dsa-4073	vendor-advisory, x_refsource_DEBIAN
https://www.spinics.net/lists/linux-usb/msg163644.html	x_refsource_MISC
https://usn.ubuntu.com/3619-1/	vendor-advisory, x_refsource_UBUNTU
https://access.redhat.com/errata/RHSA-2019:1170	vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:1190	vendor-advisory, x_refsource_REDHAT
https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html	x_refsource_MISC

Impacted products

Vendor	Product
n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T20:51:32.189Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "USN-3619-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3619-2/"
          },
          {
            "name": "DSA-4082",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4082"
          },
          {
            "name": "[debian-lts-announce] 20180107 [SECURITY] [DLA 1232-1] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/01/msg00004.html"
          },
          {
            "name": "SUSE-SU-2018:0011",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html"
          },
          {
            "name": "USN-3754-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3754-1/"
          },
          {
            "name": "RHSA-2018:1062",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1062"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2017/12/12/7"
          },
          {
            "name": "RHSA-2018:0676",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0676"
          },
          {
            "name": "DSA-4073",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-4073"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.spinics.net/lists/linux-usb/msg163644.html"
          },
          {
            "name": "USN-3619-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3619-1/"
          },
          {
            "name": "RHSA-2019:1170",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1170"
          },
          {
            "name": "RHSA-2019:1190",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1190"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-12-12T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The usb_destroy_configuration function in drivers/usb/core/config.c in the USB core subsystem in the Linux kernel through 4.14.5 does not consider the maximum number of configurations and interfaces before attempting to release resources, which allows local users to cause a denial of service (out-of-bounds write access) or possibly have unspecified other impact via a crafted USB device."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-10-16T17:40:47",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "USN-3619-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3619-2/"
        },
        {
          "name": "DSA-4082",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4082"
        },
        {
          "name": "[debian-lts-announce] 20180107 [SECURITY] [DLA 1232-1] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/01/msg00004.html"
        },
        {
          "name": "SUSE-SU-2018:0011",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html"
        },
        {
          "name": "USN-3754-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3754-1/"
        },
        {
          "name": "RHSA-2018:1062",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1062"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://openwall.com/lists/oss-security/2017/12/12/7"
        },
        {
          "name": "RHSA-2018:0676",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0676"
        },
        {
          "name": "DSA-4073",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-4073"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.spinics.net/lists/linux-usb/msg163644.html"
        },
        {
          "name": "USN-3619-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3619-1/"
        },
        {
          "name": "RHSA-2019:1170",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1170"
        },
        {
          "name": "RHSA-2019:1190",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1190"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-17558",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The usb_destroy_configuration function in drivers/usb/core/config.c in the USB core subsystem in the Linux kernel through 4.14.5 does not consider the maximum number of configurations and interfaces before attempting to release resources, which allows local users to cause a denial of service (out-of-bounds write access) or possibly have unspecified other impact via a crafted USB device."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "USN-3619-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3619-2/"
            },
            {
              "name": "DSA-4082",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4082"
            },
            {
              "name": "[debian-lts-announce] 20180107 [SECURITY] [DLA 1232-1] linux security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/01/msg00004.html"
            },
            {
              "name": "SUSE-SU-2018:0011",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html"
            },
            {
              "name": "USN-3754-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3754-1/"
            },
            {
              "name": "RHSA-2018:1062",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1062"
            },
            {
              "name": "http://openwall.com/lists/oss-security/2017/12/12/7",
              "refsource": "MISC",
              "url": "http://openwall.com/lists/oss-security/2017/12/12/7"
            },
            {
              "name": "RHSA-2018:0676",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0676"
            },
            {
              "name": "DSA-4073",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-4073"
            },
            {
              "name": "https://www.spinics.net/lists/linux-usb/msg163644.html",
              "refsource": "MISC",
              "url": "https://www.spinics.net/lists/linux-usb/msg163644.html"
            },
            {
              "name": "USN-3619-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3619-1/"
            },
            {
              "name": "RHSA-2019:1170",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1170"
            },
            {
              "name": "RHSA-2019:1190",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1190"
            },
            {
              "name": "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2017-17558",
    "datePublished": "2017-12-12T15:00:00",
    "dateReserved": "2017-12-12T00:00:00",
    "dateUpdated": "2024-08-05T20:51:32.189Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2016-7913

Vulnerability from cvelistv5

Published

2016-11-16 04:49

Modified

2024-08-06 02:13

Severity

Summary

The xc2028_set_config function in drivers/media/tuners/tuner-xc2028.c in the Linux kernel before 4.6 allows local users to gain privileges or cause a denial of service (use-after-free) via vectors involving omission of the firmware name from a certain data structure.

References

URL	Tags
http://source.android.com/security/bulletin/2016-11-01.html	x_refsource_CONFIRM
https://access.redhat.com/errata/RHSA-2018:1062	vendor-advisory, x_refsource_REDHAT
https://github.com/torvalds/linux/commit/8dfbcc4351a0b6d2f2d77f367552f48ffefafe18	x_refsource_CONFIRM
https://access.redhat.com/errata/RHSA-2018:0676	vendor-advisory, x_refsource_REDHAT
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8dfbcc4351a0b6d2f2d77f367552f48ffefafe18	x_refsource_CONFIRM
http://www.securityfocus.com/bid/94201	vdb-entry, x_refsource_BID
https://usn.ubuntu.com/3798-1/	vendor-advisory, x_refsource_UBUNTU
https://usn.ubuntu.com/3798-2/	vendor-advisory, x_refsource_UBUNTU
https://access.redhat.com/errata/RHSA-2019:1170	vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:1190	vendor-advisory, x_refsource_REDHAT

Impacted products

Vendor	Product
n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T02:13:20.821Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://source.android.com/security/bulletin/2016-11-01.html"
          },
          {
            "name": "RHSA-2018:1062",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1062"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/8dfbcc4351a0b6d2f2d77f367552f48ffefafe18"
          },
          {
            "name": "RHSA-2018:0676",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0676"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8dfbcc4351a0b6d2f2d77f367552f48ffefafe18"
          },
          {
            "name": "94201",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/94201"
          },
          {
            "name": "USN-3798-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3798-1/"
          },
          {
            "name": "USN-3798-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3798-2/"
          },
          {
            "name": "RHSA-2019:1170",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1170"
          },
          {
            "name": "RHSA-2019:1190",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1190"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-04-27T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The xc2028_set_config function in drivers/media/tuners/tuner-xc2028.c in the Linux kernel before 4.6 allows local users to gain privileges or cause a denial of service (use-after-free) via vectors involving omission of the firmware name from a certain data structure."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-05-14T22:06:08",
        "orgId": "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6",
        "shortName": "google_android"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://source.android.com/security/bulletin/2016-11-01.html"
        },
        {
          "name": "RHSA-2018:1062",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1062"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/torvalds/linux/commit/8dfbcc4351a0b6d2f2d77f367552f48ffefafe18"
        },
        {
          "name": "RHSA-2018:0676",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0676"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8dfbcc4351a0b6d2f2d77f367552f48ffefafe18"
        },
        {
          "name": "94201",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/94201"
        },
        {
          "name": "USN-3798-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3798-1/"
        },
        {
          "name": "USN-3798-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3798-2/"
        },
        {
          "name": "RHSA-2019:1170",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1170"
        },
        {
          "name": "RHSA-2019:1190",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1190"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@android.com",
          "ID": "CVE-2016-7913",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The xc2028_set_config function in drivers/media/tuners/tuner-xc2028.c in the Linux kernel before 4.6 allows local users to gain privileges or cause a denial of service (use-after-free) via vectors involving omission of the firmware name from a certain data structure."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://source.android.com/security/bulletin/2016-11-01.html",
              "refsource": "CONFIRM",
              "url": "http://source.android.com/security/bulletin/2016-11-01.html"
            },
            {
              "name": "RHSA-2018:1062",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1062"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/8dfbcc4351a0b6d2f2d77f367552f48ffefafe18",
              "refsource": "CONFIRM",
              "url": "https://github.com/torvalds/linux/commit/8dfbcc4351a0b6d2f2d77f367552f48ffefafe18"
            },
            {
              "name": "RHSA-2018:0676",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0676"
            },
            {
              "name": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8dfbcc4351a0b6d2f2d77f367552f48ffefafe18",
              "refsource": "CONFIRM",
              "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8dfbcc4351a0b6d2f2d77f367552f48ffefafe18"
            },
            {
              "name": "94201",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/94201"
            },
            {
              "name": "USN-3798-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3798-1/"
            },
            {
              "name": "USN-3798-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3798-2/"
            },
            {
              "name": "RHSA-2019:1170",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1170"
            },
            {
              "name": "RHSA-2019:1190",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1190"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6",
    "assignerShortName": "google_android",
    "cveId": "CVE-2016-7913",
    "datePublished": "2016-11-16T04:49:00",
    "dateReserved": "2016-09-09T00:00:00",
    "dateUpdated": "2024-08-06T02:13:20.821Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Action not permitted

Vulnerability from csaf_redhat

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Tags