CVE-2017-16913

The "stub_recv_cmd_submit()" function (drivers/usb/usbip/stub_rx.c) in the Linux Kernel before version 4.14.8, 4.9.71, and 4.4.114 when handling CMD_SUBMIT…

published January 31, 2018

CVSS
—
EPSS
4%
Percentile
90.3
In the wild
Unconfirmed
What it is

The "stub_recv_cmd_submit()" function (drivers/usb/usbip/stub_rx.c) in the Linux Kernel before version 4.14.8, 4.9.71, and 4.4.114 when handling CMD_SUBMIT packets allows attackers to cause a denial of service (arbitrary memory allocation) via a specially crafted USB over IP packet.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03929 · 90.3th percentile
Published
2018-01-31T22:00Z
EPSS history
Timeline
  • 31 JAN 22:00Z
    The "stub_recv_cmd_submit()" function (drivers/usb/usbip/stub_rx.c) in the Linux Kernel before version 4.14.8, 4.9.71, and 4.4.114 when handling CMD_SUBMIT…
    cvelistv5