VulnerabilityModified

CVE-2017-14954

The waitid implementation in kernel/exit.c in the Linux kernel through 4.13.4 accesses rusage data structures in unintended cases, which allows local users to obtain sensitive information, and bypass the KASLR protection mechanism, via a crafted system…

MEDIUM 5.5EPSS 1.01%

Does this matter?

Lower severity and a low EPSS score (1.01%). Track it; it rarely justifies an emergency change on its own.

Description

CVSS 3.0: 5.5 MEDIUMCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS: 1.01% probability · 61th percentile
CISA KEV: Not listed
Weakness: CWE-200
Affected: linux/linux kernel
Source: cve@mitre.org

References

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6c85501f2fabcfc4fc6ed976543d252c4eaf4be9Issue Tracking, Patch, Third Party Advisory
https://github.com/torvalds/linux/commit/6c85501f2fabcfc4fc6ed976543d252c4eaf4be9Issue Tracking, Patch, Third Party Advisory
https://grsecurity.net/~spender/exploits/wait_for_kaslr_to_be_effective.cThird Party Advisory
https://twitter.com/_argp/status/914021130712870912Third Party Advisory
https://twitter.com/grsecurity/status/914079864478666753Third Party Advisory
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6c85501f2fabcfc4fc6ed976543d252c4eaf4be9Issue Tracking, Patch, Third Party Advisory
https://github.com/torvalds/linux/commit/6c85501f2fabcfc4fc6ed976543d252c4eaf4be9Issue Tracking, Patch, Third Party Advisory
https://grsecurity.net/~spender/exploits/wait_for_kaslr_to_be_effective.cThird Party Advisory
https://twitter.com/_argp/status/914021130712870912Third Party Advisory
https://twitter.com/grsecurity/status/914079864478666753Third Party Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.