VDB

CVE-2017-8064

CVE-2017-8064 REJECTED CVSS 7.800000190734863 HIGH

drivers/media/usb/dvb-usb-v2/dvb_usb_core.c in the Linux kernel 4.9.x and 4.10.x before 4.10.12 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a DMA scatterlist.

EPSS 0.36% · 27.1th percentile

Risk Scores

CVSS 3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.36%
27.1th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSlinux-gcp0
Ubuntu:16.04:LTSlinux-azure0
Ubuntu:14.04:LTSlinux-azure0
Ubuntu:16.04:LTSlinux-hwe4.8.0-46.49~16.04.1, 4.8.0-49.52~16.04.1, 4.8.0-51.54~16.04.1

Timeline

  • Apr 14, 2021 EPSS Score
  • Jun 23, 2021 EPSS Score
  • Aug 25, 2021 EPSS Score
  • Oct 27, 2021 EPSS Score
  • Dec 29, 2021 EPSS Score
  • Mar 2, 2022 EPSS Score
  • May 4, 2022 EPSS Score
  • Jul 6, 2022 EPSS Score
  • Sep 7, 2022 EPSS Score
  • Nov 9, 2022 EPSS Score
  • Jan 11, 2023 EPSS Score
  • Mar 7, 2023 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›