cbcvebase.
CVE-2017-17806
published 2017-12-20

CVE-2017-17806: The HMAC implementation (crypto/hmac.c) in the Linux kernel before 4.14.8 does not validate that the underlying cryptographic hash algorithm is unkeyed…

high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
The HMAC implementation (crypto/hmac.c) in the Linux kernel before 4.14.8 does not validate that the underlying cryptographic hash algorithm is unkeyed, allowing a local attacker able to use the AF_ALG-based hash interface (CONFIG_CRYPTO_USER_API_HASH) and the SHA-3 hash algorithm (CONFIG_CRYPTO_SHA3) to cause a kernel stack buffer overflow by executing a crafted sequence of system calls that encounter a missing SHA-3 initialization.

Affected

27 ranges· showing 25
VendorProductVersion rangeFixed in
canonicalubuntu_linux
canonicalubuntu_linux
canonicalubuntu_linux
canonicalubuntu_linux
debiandebian_linux
debiandebian_linux
debianlinux< linux 4.14.7-1 (bookworm)linux 4.14.7-1 (bookworm)
googleandroid
linuxlinux_kernel< 3.2.973.2.97
linuxlinux_kernel>= 0 < 4.14.7-14.14.7-1
linuxlinux_kernel>= 0 < 4.14.7-14.14.7-1
linuxlinux_kernel>= 0 < 4.14.7-14.14.7-1
linuxlinux_kernel>= 0 < 4.14.7-14.14.7-1
linuxlinux_kernel>= 0 < 3.13.0-142.1913.13.0-142.191
linuxlinux_kernel>= 0 < 4.4.0-119.1434.4.0-119.143
linuxlinux_kernel>= 3.17 < 3.18.893.18.89
linuxlinux_kernel>= 3.19 < 4.1.494.1.49
linuxlinux_kernel>= 3.3 < 3.16.523.16.52
linuxlinux_kernel>= 4.10 < 4.14.84.14.8
linuxlinux_kernel>= 4.2 < 4.4.1074.4.107
linuxlinux_kernel>= 4.5 < 4.9.714.9.71
opensuseleap
opensuse_projectleap
suselinux_enterprise_desktop
suselinux_enterprise_server

CVSS provenance

nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv7.8HIGH