CVE-2017-3196CWE-119
PCAUSA Rawether framework does not properly validate BPF data, allowing a crafted malicious BPF program to perform operations on memory outside of its typical…
published December 15, 2017
What it is
PCAUSA Rawether framework does not properly validate BPF data, allowing a crafted malicious BPF program to perform operations on memory outside of its typical bounds on the driver's receipt of network packets. Local attackers can exploit this issue to execute arbitrary code with SYSTEM privileges.
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.00704 · 52.5th percentile
- Weakness
- CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer
- Published
- 2017-12-15T14:00Z
EPSS history
Timeline