CVE-2017-3196

EPSS 0.7%CWE-119

Vexday Risk Score

3Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS —EPSS 0.7%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

15 dic 2017Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

PCAUSA Rawether framework does not properly validate BPF data, allowing a crafted malicious BPF program to perform operations on memory outside of its typical bounds on the driver's receipt of network packets. Local attackers can exploit this issue to execute arbitrary code with SYSTEM privileges.

Productos afectados

Printing Communications Assoc., Inc. (PCAUSA) · ASUS PCE-AC56 WLAN Card Utilities

Referencias

http://blog.rewolf.pl/blog/?p=1778 https://www.itsecuritynews.info/vuln-printing-communications-association-rawether-cve-2017-3196-local-privilege-escalation-vulnerability/https://www.kb.cert.org/vuls/id/600671 http://www.securityfocus.com/bid/96993/discuss