ID:

CVE-2017-17806 (NVD)

- Vulnerability Info (edit)
2017-12-20

The HMAC implementation (crypto/hmac.c) in the Linux kernel before 4.14.8 does not validate that the underlying cryptographic hash algorithm is unkeyed, allowing a local attacker able to use the AF_ALG-based hash interface (CONFIG_CRYPTO_USER_API_HASH) and the SHA-3 hash algorithm (CONFIG_CRYPTO_SHA3) to cause a kernel stack buffer overflow by executing a crafted sequence of system calls that encounter a missing SHA-3 initialization.

Products Debian_linux, Linux_kernel, Leap, Leap, Linux_enterprise_desktop, Linux_enterprise_server, Linux_enterprise_server_for_raspberry_pi
Type Improper Restriction of Operations within the Bounds of a Memory Buffer (CWE-119)
First patch https://github.com/torvalds/linux/commit/af3ff8045bbf3e32f1a448542e73abb4c8ceb6f1
Patches http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=af3ff8045bbf3e32f1a448542e73abb4c8ceb6f1
Relevant file/s • ./crypto/hmac.c (modified, +5, -1)
• ./crypto/shash.c (modified, +3, -2)
• ./include/crypto/internal/hash.h (modified, +8)
Links https://usn.ubuntu.com/3619-2/
https://usn.ubuntu.com/3583-1/
https://usn.ubuntu.com/3619-1/
http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html
https://access.redhat.com/errata/RHSA-2018:2948
Annotation

Note:

This entry has not been annotated yet.

Please consider adding data:

linux - Tree: af3ff8045b

(? files)

Filter Settings
Files
Navigation
Patch data:

(on by default)


Patched area: