CVE-2017-17558

Current Description

The usb_destroy_configuration function in drivers/usb/core/config.c in the USB core subsystem in the Linux kernel through 4.14.5 does not consider the maximum number of configurations and interfaces before attempting to release resources, which allows local users to cause a denial of service (out-of-bounds write access) or possibly have unspecified other impact via a crafted USB device.

Basic Data

Published	December 12, 2017
Last Modified	May 14, 2019
Assigner	cve@mitre.org
Data Type	CVE
Data Format	MITRE
Data Version	4.0
Problem Type	CWE-787
CVE Data Version	4.0

Base Metric V2

CVSS 2 - Version	2.0
CVSS 2 - Vector String	AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSS 2 - Access Vector	LOCAL
CVSS 2 - Access Complexity	LOW
CVSS 2 - Authentication	NONE
CVSS 2 - Confidentiality Impact	COMPLETE
CVSS 2 - Availability Impact	COMPLETE
CVSS 2 - Base Score	7.2
Severity	HIGH
Exploitability Score	3.9
Impact Score	10.0
Obtain All Privilege	false
Obtain User Privilege	false
Obtain Other Privilege	false

Base Metric V3

CVSS 3 - Version	3.0
CVSS 3 - Vector String	CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3 - Attack Vector	PHYSICAL
CVSS 3 - Attack Complexity	LOW
CVSS 3 - Privileges Required	LOW
CVSS 3 - User Interaction	NONE
CVSS 3 - Scope	UNCHANGED
CVSS 3 - Confidentiality Impact	HIGH
CVSS 3 - Integrity Impact	HIGH
CVSS 3 - Availability Impact	HIGH
CVSS 3 - Base Score	6.6
CVSS 3 - Base Severity	MEDIUM
Exploitability Score	0.7
Base Severity	MEDIUM

Configurations

Vulnerable Software List

Vendor	Product	Versions
Linux	Linux Kernel	*
Suse	Linux Enterprise Server	11

References