CVE-2017-18551

MEDIUM6.7

An issue was discovered in drivers/i2c/i2c-core-smbus

Published Aug 19, 2019

Modified 1 years ago

Details

An issue was discovered in drivers/i2c/i2c-core-smbus.c in the Linux kernel before 4.14.15. There is an out of bounds write in the function i2c_smbus_xfer_emulated.

References

ADVISORY

http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html

ADVISORY

http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html

WEB

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.15

WEB

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=89c6efa61f5709327ecfa24bff18e57a4e80c7fa

WEB

https://support.f5.com/csp/article/K48073202?utm_source=f5support&amp%3Butm_medium=RSS

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2017-18551

CVSS Analysis

CVSS v3.1

6.7

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

LowAC:L

Privileges Required

HighPR:H

User Interaction

NoneUI:N

Scope

UnchangedS:U

Impact

Confidentiality

HighC:H

Integrity

HighI:H

Availability

HighA:H

6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Ecosystems

Timeline

PublishedAug 19, 2019

ModifiedAug 5, 2024

CVE-2017-18551 | Mondoo Vulnerability Intelligence