Cette page suit l'état du correctif pour Ubuntu. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2017-17712 →

UBUNTU-CVE-2017-17712

The raw_sendmsg() function in net/ipv4/raw.c in the Linux kernel through 4.14.6 has a race condition in inet->hdrincl that leads to uninitialized stac...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

The raw_sendmsg() function in net/ipv4/raw.c in the Linux kernel through 4.14.6 has a race condition in inet->hdrincl that leads to uninitialized stack pointer usage; this allows a local user to execute code and gain privileges.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Ubuntu:14.04:LTS linux-aws

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1014.14"}]}]

Ubuntu:14.04:LTS linux-lts-xenial

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-116.140~14.04.1"}]}]

Ubuntu:16.04:LTS linux

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-116.140"}]}]

Ubuntu:16.04:LTS linux-aws

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1052.61"}]}]

Ubuntu:16.04:LTS linux-azure

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.0-1011.14"}]}]

Ubuntu:16.04:LTS linux-euclid

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-9025.27"}]}]

Ubuntu:16.04:LTS linux-gcp

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.0-1011.15"}]}]

Ubuntu:16.04:LTS linux-hwe

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.0-41.46~16.04.1"}]}]

Ubuntu:16.04:LTS linux-kvm

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1019.24"}]}]

Ubuntu:16.04:LTS linux-oem

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.0-1021.23"}]}]

Ubuntu:16.04:LTS linux-raspi2

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1085.93"}]}]

Ubuntu:16.04:LTS linux-snapdragon

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1087.92"}]}]

Ubuntu:Pro:FIPS-updates:16.04:LTS linux-fips

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1005.5"}]}]

Ubuntu:20.04:LTS linux-azure-fde