CVE-2017-2636 | Vulnetix

CVE-2017-2636 PUBLISHED CVSS 7 HIGH

Race condition in drivers/tty/n_hdlc.c in the Linux kernel through 4.10.1 allows local users to gain privileges or cause a denial of service (double free) by setting the HDLC line discipline.

EPSS 1.02% · 61.9th percentile

Risk Scores

CVSS 3.1

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Score

1.02%

61.9th percentile

Affected Products

Vendor	Product	Versions
Ubuntu:16.04:LTS	linux-gke	4.4.0-1003.3, 0
Ubuntu:16.04:LTS	linux-raspi2	4.4.0-1044.51, 4.4.0-1042.49, 4.4.0-1040.47
Ubuntu:14.04:LTS	linux	3.13.0-2.17, 3.13.0-17.37, 3.13.0-18.38
Ubuntu:16.04:LTS	linux	4.4.0-59.80, 4.4.0-57.78, 4.4.0-36.55
Ubuntu:14.04:LTS	linux-lts-xenial	*, 0, 4.4.0-13.29~14.04.1
Ubuntu:16.04:LTS	linux-snapdragon	4.4.0-1042.46, 4.4.0-1012.12, 4.4.0-1013.14
Ubuntu:16.04:LTS	linux-hwe	*, 4.8.0-36.36~16.04.1, 0
Ubuntu:16.04:LTS	linux-aws	4.4.0-1004.13, 4.4.0-1003.12, 0

Timeline

Mar 7, 2017 CVE Published
Apr 14, 2021 EPSS Score
Jun 23, 2021 EPSS Score
Aug 25, 2021 EPSS Score
Oct 27, 2021 EPSS Score
Dec 29, 2021 EPSS Score
Mar 2, 2022 EPSS Score
May 4, 2022 EPSS Score
Jul 6, 2022 EPSS Score
Sep 9, 2022 EPSS Score
Nov 11, 2022 EPSS Score
Jan 13, 2023 EPSS Score

References

https://ubuntu.com/security/CVE-2017-2636 third-party-advisory
http://www.openwall.com/lists/oss-security/2017/03/07/6 third-party-advisory
https://ubuntu.com/security/notices/USN-3219-1 vendor-advisory
https://ubuntu.com/security/notices/USN-3218-1 vendor-advisory
https://ubuntu.com/security/notices/USN-3219-2 vendor-advisory
https://ubuntu.com/security/notices/USN-3220-1 vendor-advisory
https://ubuntu.com/security/notices/USN-3220-2 vendor-advisory
https://ubuntu.com/security/notices/USN-3221-1 vendor-advisory
https://ubuntu.com/security/notices/USN-3221-2 vendor-advisory
https://ubuntu.com/security/notices/USN-3220-3 vendor-advisory
https://www.cve.org/CVERecord?id=CVE-2017-2636 third-party-advisory

Open in Interactive Console →