CVE-2017-11473

CVSS v3.1 7.8 (High)

CVSS v2.0 7.2 (High)

EPSS 0.04 % (5^th)

Affected Products 2

Advisories 12

Buffer overflow in the mp_override_legacy_irq() function in arch/x86/kernel/acpi/boot.c in the Linux kernel through 3.2 allows local users to gain privileges via a crafted ACPI table.

Weaknesses

CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE Status: PUBLISHED
CNA: MITRE
Published Date: 2017-07-20 04:29:00
(7 years ago)
Updated Date: 2023-01-19 15:48:36
(20 months ago)

Affected Products

Canonical

Ubuntu Linux

Linux

Linux Kernel

Configuration #1

	CPE23	From	Up To
Linux Kernel prior 3.2.95 version	cpe:2.3:o:linux:linux_kernel		< 3.2.95
Linux Kernel from 3.3 version and prior 3.16.50 version	cpe:2.3:o:linux:linux_kernel	>= 3.3	< 3.16.50
Linux Kernel from 3.17 version and prior 3.18.63 version	cpe:2.3:o:linux:linux_kernel	>= 3.17	< 3.18.63
Linux Kernel from 3.19 version and prior 4.1.44 version	cpe:2.3:o:linux:linux_kernel	>= 3.19	< 4.1.44
Linux Kernel from 4.2 version and prior 4.4.79 version	cpe:2.3:o:linux:linux_kernel	>= 4.2	< 4.4.79
Linux Kernel from 4.5 version and prior 4.9.40 version	cpe:2.3:o:linux:linux_kernel	>= 4.5	< 4.9.40
Linux Kernel from 4.10 version and prior 4.12.4 version	cpe:2.3:o:linux:linux_kernel	>= 4.10	< 4.12.4

Configuration #2

		CPE23	From	Up To
	Canonical Ubuntu Linux 14.04	cpe:2.3:o:canonical:ubuntu_linux:14.04:::*:esm