CVE-2017-5550

Off-by-one error in the pipe_advance function in lib/iov_iter.c in the Linux kernel before 4.9.5 allows local users to obtain sensitive information from…

published February 6, 2017

CVSS
—
EPSS
0%
Percentile
34.6
In the wild
Unconfirmed
What it is

Off-by-one error in the pipe_advance function in lib/iov_iter.c in the Linux kernel before 4.9.5 allows local users to obtain sensitive information from uninitialized heap-memory locations in opportunistic circumstances by reading from a pipe after an incorrect buffer-release decision.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00417 · 34.6th percentile
Published
2017-02-06T06:04Z
EPSS history
Timeline
  • 06 FEB 06:04Z
    Off-by-one error in the pipe_advance function in lib/iov_iter.c in the Linux kernel before 4.9.5 allows local users to obtain sensitive information from…
    cvelistv5