Wind River Support Network

HomeDefectsLIN8-8186
Fixed

LIN8-8186 : Security Advisory - linux - CVE-2017-16528

Created: Nov 13, 2017    Updated: Dec 3, 2018
Resolved Date: Aug 27, 2018
Found In Version: 8.0.0.23
Fix Version: 8.0.0.27
Severity: Standard
Applicable for: Wind River Linux 8
Component/s: Kernel

Description

sound/core/seq_device.c in the Linux kernel before 4.13.4 allows local users to cause a denial of service (snd_rawmidi_dev_seq_free use-after-free and system crash) or possibly have unspecified other impact via a crafted USB device.

https://nvd.nist.gov/vuln/detail/CVE-2017-16528

Steps to Reproduce

CONFIG_SND_SEQUENCER=y

Other Downloads

CVEs

Live chat
Online
  • Linkedin
  • Facebook
  • Twitter
  • Youtube