NetSight
IP …
medium5.9

CVE-2017-16913

The "stub_recv_cmd_submit()" function (drivers/usb/usbip/stub_rx.c) in the Linux Kernel before version 4.14.8, 4.9.71, and 4.4.114 when handling CMD_SUBMIT pac…

Impact

The "stub_recv_cmd_submit()" function (drivers/usb/usbip/stub_rx.c) in the Linux Kernel before version 4.14.8, 4.9.71, and 4.4.114 when handling CMD_SUBMIT packets allows attackers to cause a denial of service (arbitrary memory allocation) via a specially crafted USB over IP packet.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.1.0 before 4.1.49
from 4.4.0 before 4.4.107
from 4.9.0 before 4.9.71
from 4.14.0 before 4.14.8

Weakness classification

CWE-119

References