ISOMAN

CVE

CVE-2017-12153

A security flaw was discovered in the nl80211_set_rekey_data() function in net/wireless/nl80211.c in the Linux kernel through 4.13.3. This function does not check whether the required attributes are present in a Netlink request. This request can be issued by a user with the CAP_NET_ADMIN capability and may result in a NULL pointer dereference and system crash.

Severity
MEDIUM
CVSS
4.4
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu14.04.6 amd64 desktopunknownsource
Ubuntu14.04.6 i386 desktopunknownsource
Ubuntu14.04.6 amd64 serverunknownsource
Ubuntu14.04.6 i386 serverunknownsource

References

  1. http://seclists.org/oss-sec/2017/q3/437
  2. http://www.debian.org/security/2017/dsa-3981
  3. http://www.securityfocus.com/bid/100855
  4. https://bugzilla.novell.com/show_bug.cgi?id=1058410
  5. https://bugzilla.redhat.com/show_bug.cgi?id=1491046
  6. https://git.kernel.org/pub/scm/linux/kernel/git/jberg/mac80211.git/commit/?id=e785fa0a164aa11001cba931367c7f94ffaff888
  7. https://marc.info/?t=150525503100001&r=1&w=2
  8. https://usn.ubuntu.com/3583-1/
  9. https://usn.ubuntu.com/3583-2/
  10. http://seclists.org/oss-sec/2017/q3/437
  11. http://www.debian.org/security/2017/dsa-3981
  12. http://www.securityfocus.com/bid/100855
  13. https://bugzilla.novell.com/show_bug.cgi?id=1058410
  14. https://bugzilla.redhat.com/show_bug.cgi?id=1491046
  15. https://git.kernel.org/pub/scm/linux/kernel/git/jberg/mac80211.git/commit/?id=e785fa0a164aa11001cba931367c7f94ffaff888
  16. https://marc.info/?t=150525503100001&r=1&w=2
  17. https://usn.ubuntu.com/3583-1/
  18. https://usn.ubuntu.com/3583-2/