CVE-2017-8831

 

Published at: - 08-05-2017 08:29

Last modified: - 26-10-2022 01:44

Total changes: - 4

Description

The saa7164_bus_get function in drivers/media/pci/saa7164/saa7164-bus.c in the Linux kernel through 4.11.5 allows local users to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact by changing a certain sequence-number value, aka a "double fetch" vulnerability.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

 

Verification logic

 

Reference

• https://bugzilla.kernel.org/show_bug.cgi?id=195559
• https://github.com/stoth68000/media-tree/commit/354dd3924a2e43806774953de536257548b5002c
• http://www.securityfocus.com/archive/1/540770/30/0/threaded
• 99619-Third Party Advisory, VDB Entry
• [debian-lts-announce] 20171210 [SECURITY] [DLA 1200-1] linux security update-Mailing List, Third Party Advisory
• USN-3754-1-Third Party Advisory

 

Keywords

NVD

 

CVE-2017-8831

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures