CVE-2017-7482CWE-190

In the Linux kernel before version 4.12, Kerberos 5 tickets decoded when using the RXRPC keys incorrectly assumes the size of a field

High · published July 30, 2018

CVSS v3.0
7.1
EPSS
0%
Percentile
39.4
In the wild
Unconfirmed
What it is

In the Linux kernel before version 4.12, Kerberos 5 tickets decoded when using the RXRPC keys incorrectly assumes the size of a field. This could lead to the size-remaining variable wrapping and the data pointer going over the end of the buffer. This could possibly lead to memory corruption and possible privilege escalation.

The record
Technical detail
CVSS v3.0
7.1 · HIGH
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00470 · 39.4th percentile
Weakness
CWE-190 · Integer Overflow or Wraparound
Published
2018-07-30T14:00Z
EPSS history
Timeline
  • 30 JUL 14:00Z
    In the Linux kernel before version 4.12, Kerberos 5 tickets decoded when using the RXRPC keys incorrectly assumes the size of a field
    cvelistv5