CVE-2017-16995
CVE-2017-16995
Vexday Risk Score
50Atención
Decisión SSVC (CISA)
Attend
PoC disponible → seguir de cerca
Madurez del exploit
Exploit funcional
PoC popular en GitHub (13 estrellas) — código de explotación ampliamente disponible.
CVSS —EPSS 30.1%KEV nãoPoC públicaNuclei —Metasploit simPatch referenciado
Ciclo de vida
12 nov 2017Exploit Metasploit disponible
22 dic 2017Publicada en NVD
16 mar 2018PoC pública
Velocidad de armamento
84 díashasta el primer PoC
Recomendación: Planificar corrección próxima — ya existe PoC pública.
The check_alu_op function in kernel/bpf/verifier.c in the Linux kernel through 4.4 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging incorrect sign extension.
Productos afectados
n/a · n/aPoCs públicas encontradas — 20
githubgithub.com/Al1ex/CVE-2017-16995★ 13githubgithub.com/ph4ntonn/CVE-2017-16995★ 2githubgithub.com/littlebin404/CVE-2017-16995★ 1githubgithub.com/senyuuri/cve-2017-16995★ 1githubgithub.com/vnik5287/CVE-2017-16995★ 1githubgithub.com/gugronnier/CVE-2017-16995★ 1githubgithub.com/ivilpez/cve-2017-16995.c★ 0githubgithub.com/Lumindu/CVE-2017-16995-Linux-Kernel---BPF-Sign-Extension-Local-Privilege-Escalation-★ 0githubgithub.com/ZhiQiAnSecFork/cve-2017-16995★ 0githubgithub.com/xxxTectationxxx/CVE-2017-16995★ 0githubgithub.com/C0dak/CVE-2017-16995★ 0githubgithub.com/fei9747/CVE-2017-16995★ 0githubgithub.com/anldori/CVE-2017-16995★ 0githubgithub.com/mareks1007/cve-2017-16995★ 0exploitdbwww.exploit-db.com/exploits/45058no verificadocve_referencewww.exploit-db.com/exploits/45010/no verificadocve_referencewww.exploit-db.com/exploits/45058/no verificadocve_referencewww.exploit-db.com/exploits/44298/no verificadoexploitdbwww.exploit-db.com/exploits/45010no verificadoexploitdbwww.exploit-db.com/exploits/44298no verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
Referencias
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=95a762e2c8c942780948091f8f2a4f32fce1ac6fhttp://openwall.com/lists/oss-security/2017/12/21/2https://bugs.chromium.org/p/project-zero/issues/detail?id=1454https://github.com/torvalds/linux/commit/95a762e2c8c942780948091f8f2a4f32fce1ac6fhttps://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=a6132276ab5dcc38b3299082efeb25b948263adbhttps://usn.ubuntu.com/3619-1/https://usn.ubuntu.com/3619-2/https://usn.ubuntu.com/3633-1/https://usn.ubuntu.com/usn/usn-3523-2/https://www.debian.org/security/2017/dsa-4073https://www.exploit-db.com/exploits/44298/https://www.exploit-db.com/exploits/45010/