CVE-2017-18344
MediumThe timer_create syscall implementation in kernel/time/posix-timers.c in the Linux kernel before 4.14.8 doesn't properly validate the sigevent->sigev_notify field, which leads to out-of-bounds access in the show_timer function (called when /proc/$PID/timers is read). This allows userspace applications to read arbitrary kernel memory (on a kernel built with CONFIG_POSIX_TIMERS and CONFIG_CHECKPOINT_RESTORE).
CVSS 3.0 score
5.5
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weakness type
CWE-125CVE-2017-18344 is a Out-of-bounds Read vulnerability
What is Out-of-bounds Read?
The product reads data past the end or before the beginning of the intended buffer. Learn more on MITRE CWE
References
The following references provide additional information about CVE-2017-18344 including vendor advisories, patch commits, exploit details, and third-party analysis. Links are sourced from the NIST NVD database.
-
Securityfocushttp://www.securityfocus.com/bid/104909Third Party Advisory VDB Entry
-
Securitytrackerhttp://www.securitytracker.com/id/1041414Third Party Advisory VDB Entry
-
Third Party Advisory
-
Third Party Advisory
-
Third Party Advisory
-
Third Party Advisory
-
Third Party Advisory
-
Third Party Advisory
-
Third Party Advisory
-
Third Party Advisory
-
Third Party Advisory
-
Ubuntu Securityhttps://usn.ubuntu.com/3742-1/Third Party Advisory
-
Ubuntu Securityhttps://usn.ubuntu.com/3742-2/Third Party Advisory
-
Exploit-DBhttps://www.exploit-db.com/exploits/45175/Exploit Third Party Advisory VDB Entry
-
PatchKernel patch commithttps://github.com/torvalds/linux/commit/cef31d9af908243421258f1df35a4a644604efbe
Frequently asked questions
-
What is CVE-2017-18344?
CVE-2017-18344 is a Medium severity Linux kernel vulnerability with a CVSS score of 5.5 out of 10 , classified as an Out-of-bounds Read flaw (CWE-125) . CVE-2017-18344 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
What is the CVSS score for CVE-2017-18344?
CVE-2017-18344 has a CVSS score of 5.5 out of 10, rated Medium severity (CVSS 3.0). The vector string is
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N. -
Is there a patch available for CVE-2017-18344?
No patch is currently available for CVE-2017-18344. Monitor the NIST NVD and your Linux distribution's security advisories for updates.
-
Is CVE-2017-18344 actively exploited?
No — CVE-2017-18344 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.
-
What is Out-of-bounds Read (CWE-125)?
The product reads data past the end or before the beginning of the intended buffer. View CWE-125 on MITRE CWE →