NetSight
IP …
medium6.6

CVE-2017-16532

The get_endpoints function in drivers/usb/misc/usbtest.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (NULL pointer dere…

Impact

The get_endpoints function in drivers/usb/misc/usbtest.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted USB device.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 3.2.95
from 3.3 before 3.16.50
from 3.17 before 3.18.82
from 3.19 before 4.1.47
from 4.2 before 4.4.99
from 4.5 before 4.9.63
DebianDebian Linux
Version 7.0
CanonicalUbuntu Linux
Versions 14.04, 16.04, 17.10

Weakness classification

CWE-476

References