[kernel-sec-discuss] r5096 - active

Moritz Muehlenhoff jmm at moszumanska.debian.org
Mon Mar 20 10:18:01 UTC 2017


Author: jmm
Date: 2017-03-20 10:18:00 +0000 (Mon, 20 Mar 2017)
New Revision: 5096

Added:
   active/CVE-2017-7184
Log:
new issue, no details yet


Added: active/CVE-2017-7184
===================================================================
--- active/CVE-2017-7184	                        (rev 0)
+++ active/CVE-2017-7184	2017-03-20 10:18:00 UTC (rev 5096)
@@ -0,0 +1,13 @@
+Description: The linux-image-* package 4.8.0.41.52 for the Linux kernel on Ubuntu 16.10 allows local users to obtain root privileges or cause a denial of service (heap-based out-of-bounds access) via unspecified vectors, as demonstrated during a Pwn2Own competition at CanSecWest 2017.
+References:
+ http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7184
+Notes:
+ jmm> No details known yet
+Bugs:
+upstream:
+4.9-upstream-stable:
+3.16-upstream-stable:
+3.2-upstream-stable:
+sid:
+3.16-jessie-security:
+3.2-wheezy-security:




More information about the kernel-sec-discuss mailing list