NetSight
IP …
medium4.7

CVE-2017-16911

The vhci_hcd driver in the Linux Kernel before version 4.14.8 and 4.4.114 allows allows local attackers to disclose kernel memory addresses.

Impact

The vhci_hcd driver in the Linux Kernel before version 4.14.8 and 4.4.114 allows allows local attackers to disclose kernel memory addresses. Successful exploitation requires that a USB device is attached over IP.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.4.0 before 4.4.114
from 4.9.0 before 4.9.79
from 4.14.0 before 4.14.8

Weakness classification

CWE-200

References