CVE-2017-2647

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2017-2647
The KEYS subsystem in the Linux kernel before 3.18 allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) via vectors involving a NULL value for a certain match field, related to the keyring_search_iterator function in keyring.c.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector : AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

7.2 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 3.9 / Impact : 10.0

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References
Link Resource
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c06cfb08b88dfbe13be44a69ae2fdc3a7c902d81 Issue Tracking Patch Third Party Advisory
http://www.securityfocus.com/bid/97258 Third Party Advisory VDB Entry
https://access.redhat.com/errata/RHSA-2017:1842
https://access.redhat.com/errata/RHSA-2017:2077
https://access.redhat.com/errata/RHSA-2017:2437
https://access.redhat.com/errata/RHSA-2017:2444
https://bugzilla.redhat.com/show_bug.cgi?id=1428353 Issue Tracking Patch
https://github.com/torvalds/linux/commit/c06cfb08b88dfbe13be44a69ae2fdc3a7c902d81 Issue Tracking Patch Third Party Advisory
https://usn.ubuntu.com/3849-1/
https://usn.ubuntu.com/3849-2/
Configurations

Configuration 1 (hide)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

12 Feb 2023, 23:29

Type Values Removed Values Added
References
  • {'url': 'https://access.redhat.com/errata/RHSA-2020:3548', 'name': 'https://access.redhat.com/errata/RHSA-2020:3548', 'tags': [], 'refsource': 'MISC'}
  • {'url': 'https://access.redhat.com/errata/RHSA-2020:3836', 'name': 'https://access.redhat.com/errata/RHSA-2020:3836', 'tags': [], 'refsource': 'MISC'}
  • {'url': 'https://access.redhat.com/security/cve/CVE-2017-2647', 'name': 'https://access.redhat.com/security/cve/CVE-2017-2647', 'tags': [], 'refsource': 'MISC'}
Summary A flaw was found that can be triggered in keyring_search_iterator in keyring.c if type->match is NULL. A local user could use this flaw to crash the system or, potentially, escalate their privileges. The KEYS subsystem in the Linux kernel before 3.18 allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) via vectors involving a NULL value for a certain match field, related to the keyring_search_iterator function in keyring.c.

02 Feb 2023, 21:17

Type Values Removed Values Added
References
  • (MISC) https://access.redhat.com/errata/RHSA-2020:3548 -
  • (MISC) https://access.redhat.com/errata/RHSA-2020:3836 -
  • (MISC) https://access.redhat.com/security/cve/CVE-2017-2647 -
Summary The KEYS subsystem in the Linux kernel before 3.18 allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) via vectors involving a NULL value for a certain match field, related to the keyring_search_iterator function in keyring.c. A flaw was found that can be triggered in keyring_search_iterator in keyring.c if type->match is NULL. A local user could use this flaw to crash the system or, potentially, escalate their privileges.
Information

Published : 2017-03-31 04:59

Updated : 2023-12-10 12:01

NVD link : CVE-2017-2647

Mitre link : CVE-2017-2647

CVE.ORG link : CVE-2017-2647

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference