Privilege escalation in Linux kernel - CVE-2017-7482

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU7208

Privilege escalation in Linux kernel - CVE-2017-7482

Published: June 27, 2017


Vulnerability identifier: #VU7208
CSH Severity: Low
CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2017-7482
CWE-ID: CWE-120
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local attacker to gain elevated privileges on the target system.

The weakness exists due to buffer overflow. A local attacker can load a specially crafted Kerberos 5 ticket into a RxRPC key, trigger memory corruption and execute arbitrary code with root privileges.

Successful exploitation of the vulnerability may result in system compromise.

Affected software

Linux kernel
SUSE Linux
Ubuntu
Slackware Linux

MRG Realtime
kernel-rt (Red Hat package)

How to mitigate CVE-2017-7482

Install update from vendor's website.

kernel-rt (Red Hat package) - update to 3.10.0-693.46.1.rt56.639.el6rt

External References

Related Security Bulletins