CVE-2017-16911 : The vhci_hcd driver in the Linux Kernel before version 4.14.8 and 4.4.114 allows

The vhci_hcd driver in the Linux Kernel before version 4.14.8 and 4.4.114 allows allows local attackers to disclose kernel memory addresses. Successful exploitation requires that a USB device is attached over IP.

Published 2018-01-31 22:29:00

Updated 2018-08-24 10:29:02

Source Flexera Software LLC

View at NVD, CVE.org

Vulnerability category: Information leak

Products affected by CVE-2017-16911

Linux » Linux Kernel
Versions from including (>=) 4.4.0 and before (<) 4.4.114
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel
Versions from including (>=) 4.14.0 and before (<) 4.14.8
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel
Versions from including (>=) 4.9.0 and before (<) 4.9.79
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Matching versions

Threat overview for CVE-2017-16911

Top countries where our scanners detected CVE-2017-16911

Top open port discovered on systems with this issue 49152

IPs affected by CVE-2017-16911 1,958

Threat actors abusing to this issue? Yes

Find out if you^* are affected by CVE-2017-16911!

^*Directly or indirectly through your vendors, service providers and 3rd parties. Powered by attack surface intelligence from SecurityScorecard.

Exploit prediction scoring system (EPSS) score for CVE-2017-16911

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 6 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2017-16911

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
1.9	LOW	AV:L/AC:M/Au:N/C:P/I:N/A:N	3.4	2.9	NIST
Access Vector: Local Access Complexity: Medium Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None
4.7	MEDIUM	CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N	1.0	3.6	NIST
Attack Vector: Local Attack Complexity: High Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: None Availability: None

CWE ids for CVE-2017-16911

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2017-16911

https://secuniaresearch.flexerasoftware.com/secunia_research/2017-20/

Secunia Research Advisories | Flexera
Third Party Advisory
https://www.spinics.net/lists/linux-usb/msg163480.html

[PATCH 0/4] USB over IP Secuurity fixes — Linux USB
Issue Tracking;Mailing List

CVEs referencing this url
https://usn.ubuntu.com/3754-1/

USN-3754-1: Linux kernel vulnerabilities | Ubuntu security notices

CVEs referencing this url
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.8

Issue Tracking

CVEs referencing this url
https://secuniaresearch.flexerasoftware.com/advisories/80454/

Sign in
Third Party Advisory
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.114

Issue Tracking

CVEs referencing this url
http://www.securityfocus.com/bid/102156

Linux Kernel CVE-2017-16911 Local Information Disclosure Vulnerability
Third Party Advisory;VDB Entry
https://usn.ubuntu.com/3619-1/

USN-3619-1: Linux kernel vulnerabilities | Ubuntu security notices

CVEs referencing this url
https://usn.ubuntu.com/3619-2/

USN-3619-2: Linux kernel (Xenial HWE) vulnerabilities | Ubuntu security notices

CVEs referencing this url
https://www.debian.org/security/2018/dsa-4187

Debian -- Security Information -- DSA-4187-1 linux

CVEs referencing this url
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git/commit/drivers/usb/usbip?id=2f2d0088eb93db5c649d2a5e34a3800a8a935fc5

kernel/git/stable/linux.git - Linux kernel stable tree
Patch;Vendor Advisory
https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html

[SECURITY] [DLA 1369-1] linux security update

CVEs referencing this url