CVE-2017-6345 (High) detected in linuxlinux-3.0.49, linuxlinux-3.0.49
Opened this issue · 0 comments
mend-bolt-for-github commented
CVE-2017-6345 - High Severity Vulnerability
Vulnerability Details
The LLC subsystem in the Linux kernel before 4.9.13 does not ensure that a certain destructor exists in required circumstances, which allows local users to cause a denial of service (BUG_ON) or possibly have unspecified other impact via crafted system calls.
Publish Date: 2017-03-01
URL: CVE-2017-6345
CVSS 3 Score Details (7.8)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Local
- Attack Complexity: Low
- Privileges Required: Low
- User Interaction: None
- Scope: Unchanged
- Impact Metrics:
- Confidentiality Impact: High
- Integrity Impact: High
- Availability Impact: High
Suggested Fix
Type: Upgrade version
Origin: https://nvd.nist.gov/vuln/detail/CVE-2017-6345
Release Date: 2017-03-01
Fix Resolution: 4.9.13
Step up your Open Source Security Game with Mend here