NetSight
IP …
medium5.9

CVE-2017-16912

The "get_pipe()" function (drivers/usb/usbip/stub_rx.c) in the Linux Kernel before version 4.14.8, 4.9.71, and 4.4.114 allows attackers to cause a denial of se…

Impact

The "get_pipe()" function (drivers/usb/usbip/stub_rx.c) in the Linux Kernel before version 4.14.8, 4.9.71, and 4.4.114 allows attackers to cause a denial of service (out-of-bounds read) via a specially crafted USB over IP packet.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.1.0 before 4.1.49
from 4.4.0 through 4.4.107
from 4.9.0 through 4.9.71
from 4.14.0 through 4.14.8

Weakness classification

CWE-125

References