vulnwire
5.9med

CVE-2017-16913

The "stub_recv_cmd_submit()" function (drivers/usb/usbip/stub_rx.c) in the Linux Kernel before version 4.14.8, 4.9.71, and 4.4.114 when han…

Published 8 y ago · modified 4 mo ago · JSON

CVSS
5.9
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
3.9%
percentile 90%
Public exploits
0
none known

The "stub_recv_cmd_submit()" function (drivers/usb/usbip/stub_rx.c) in the Linux Kernel before version 4.14.8, 4.9.71, and 4.4.114 when handling CMD_SUBMIT packets allows attackers to cause a denial of service (arbitrary memory allocation) via a specially crafted USB over IP packet.

Exploit prediction (EPSS)

3.93% probability of exploitation in the next 30 days, higher than 90% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD3.05.9CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
NVD2.07.1AV:N/AC:M/Au:N/C:N/I:N/A:C

Affected products

  • Flexera Software LLC Linux Kernel

Classification

Weakness
  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
Technology feeds
Linux kernel (RSS, critical only)

References

  • secuniaresearch.flexerasoftware.com /secunia_research/2017-21/ · x_refsource_MISC, x_transferred
  • debian.org /security/2018/dsa-4187 · vendor-advisory, x_refsource_DEBIAN, x_transferred
  • usn.ubuntu.com /3619-2/ · vendor-advisory, x_refsource_UBUNTU, x_transferred
  • secuniaresearch.flexerasoftware.com /advisories/80601/ · x_refsource_MISC, x_transferred
  • cdn.kernel.org /pub/linux/kernel/v4.x/ChangeLog-4.4.114 · x_refsource_MISC, x_transferred
  • git.kernel.org /pub/scm/linux/kernel/git/stable/linux-stable.git/commit/drivers/usb/usbip?id=c6688ef9f297 · x_refsource_MISC, x_transferred
  • spinics.net /lists/linux-usb/msg163480.html · x_refsource_MISC, x_transferred
  • usn.ubuntu.com /3754-1/ · vendor-advisory, x_refsource_UBUNTU, x_transferred
  • cdn.kernel.org /pub/linux/kernel/v4.x/ChangeLog-4.14.8 · x_refsource_MISC, x_transferred
  • securityfocus.com /bid/102150 · vdb-entry, x_refsource_BID, x_transferred
  • cdn.kernel.org /pub/linux/kernel/v4.x/ChangeLog-4.9.71 · x_refsource_MISC, x_transferred
  • lists.debian.org /debian-lts-announce/2018/05/msg00000.html · mailing-list, x_refsource_MLIST, x_transferred
  • usn.ubuntu.com /3619-1/ · vendor-advisory, x_refsource_UBUNTU, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.