UBUNTU-CVE-2017-7482

Details

In the Linux kernel before version 4.12, Kerberos 5 tickets decoded when using the RXRPC keys incorrectly assumes the size of a field. This could lead to the size-remaining variable wrapping and the data pointer going over the end of the buffer. This could possibly lead to memory corruption and possible privilege escalation.

Affected Packages(16 packages)

linux

Ubuntu 14.04 LTS

Fixed in:

3.13.0-126.175

linux-lts-xenial

Ubuntu 14.04 LTS

Fixed in:

4.4.0-89.112~14.04.1

linux

Ubuntu 16.04 LTS

Fixed in:

4.4.0-89.112

linux-aws

Ubuntu 16.04 LTS

Fixed in:

4.4.0-1028.37

linux-gke

Ubuntu 16.04 LTS

Fixed in:

4.4.0-1024.24

linux-hwe

Ubuntu 16.04 LTS

Fixed in:

4.10.0-32.36~16.04.1

linux-raspi2

Ubuntu 16.04 LTS

Fixed in:

4.4.0-1067.75

linux-snapdragon

Ubuntu 16.04 LTS

Fixed in:

4.4.0-1069.74

linux-azure-fde

Ubuntu 20.04 LTS

Affected versions:

5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.15.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.1+16 more

linux-gke

Ubuntu 20.04 LTS

Affected versions:

5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.415.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.48+41 more

References

REPORT

http://seclists.org/oss-sec/2017/q2/602

REPORT

https://git.kernel.org/torvalds/c/5f2f97656ada8d811d3c1bef503ced266fcd53a0

REPORT

https://ubuntu.com/security/CVE-2017-7482

ADVISORY