vulnwire
7.0high

CVE-2017-75331 exploit

Race condition in the fsnotify implementation in the Linux kernel through 4.12.4 allows local users to gain privileges or cause a denial of…

Published 9 y ago · modified 4 mo ago · JSON

CVSS
7.0
v3.1 · NVD
CISA KEV
No
not known exploited
EPSS
1.2%
percentile 69%
Public exploits
1
Exploit-DB

Race condition in the fsnotify implementation in the Linux kernel through 4.12.4 allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted application that leverages simultaneous execution of the inotify_handle_event and vfs_rename functions.

Exploit prediction (EPSS)

1.22% probability of exploitation in the next 30 days, higher than 69% of all scored CVEs.

Exploits and detections

  • EDB-44302 Linux Kernel < 3.16.39 (Debian 8 x64) - 'inotfiy' Local Privilege Escalation · local · 2017-10-16

CVSS scores

Assigned byVersionScoreVector
NVD3.17.0CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD2.06.9AV:L/AC:M/Au:N/C:C/I:C/A:C

Affected products

  • n/a Linux kernel through 4.12.4

Classification

Weakness
  • CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization
Technology feeds
Linux kernel (RSS, critical only)

References

  • debian.org /security/2017/dsa-3927 · vendor-advisory, x_refsource_DEBIAN, x_transferred
  • patchwork.kernel.org /patch/9755757/ · x_refsource_MISC, x_transferred
  • bugzilla.redhat.com /show_bug.cgi?id=1468283 · x_refsource_MISC, x_transferred
  • securityfocus.com /bid/100123 · vdb-entry, x_refsource_BID, x_transferred
  • access.redhat.com /errata/RHSA-2017:2669 · vendor-advisory, x_refsource_REDHAT, x_transferred
  • access.redhat.com /errata/RHSA-2017:2473 · vendor-advisory, x_refsource_REDHAT, x_transferred
  • openwall.com /lists/oss-security/2017/08/03/2 · x_refsource_MISC, x_transferred
  • access.redhat.com /errata/RHSA-2017:2585 · vendor-advisory, x_refsource_REDHAT, x_transferred
  • patchwork.kernel.org /patch/9755753/ · x_refsource_MISC, x_transferred
  • github.com /torvalds/linux/commit/49d31c2f389acfe83417083e1208422b4091cd9e · x_refsource_MISC, x_transferred
  • mail-archive.com /linux-kernel%40vger.kernel.org/msg1408967.html · x_refsource_MISC, x_transferred
  • debian.org /security/2017/dsa-3945 · vendor-advisory, x_refsource_DEBIAN, x_transferred
  • source.android.com /security/bulletin/2017-12-01 · x_refsource_CONFIRM, x_transferred
  • securitytracker.com /id/1039075 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • access.redhat.com /errata/RHSA-2017:2770 · vendor-advisory, x_refsource_REDHAT, x_transferred
  • git.kernel.org /cgit/linux/kernel/git/torvalds/linux.git/commit/?id=49d31c2f389acfe83417083e1208422b4091c · x_refsource_MISC, x_transferred
  • access.redhat.com /errata/RHSA-2017:2869 · vendor-advisory, x_refsource_REDHAT, x_transferred
  • openwall.com /lists/oss-security/2019/06/27/7 · mailing-list, x_refsource_MLIST, x_transferred
  • openwall.com /lists/oss-security/2019/06/28/1 · mailing-list, x_refsource_MLIST, x_transferred
  • openwall.com /lists/oss-security/2019/06/28/2 · mailing-list, x_refsource_MLIST, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.