製品・ソフトウェアに関する情報

JVN脆弱性詳細

Linux Kernel における解放済みメモリの使用に関する脆弱性

Title	Linux Kernel における解放済みメモリの使用に関する脆弱性
Summary	Linux Kernel には、解放済みメモリの使用に関する脆弱性が存在します。
Possible impacts	情報を取得される、情報を改ざんされる、およびサービス運用妨害 (DoS) 状態にされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	May 8, 2017, midnight
Registration Date	Sept. 19, 2017, 4:54 p.m.
Last Update	Sept. 19, 2017, 4:54 p.m.

CVSS3.0 : 重要
Score	7
Vector	CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS2.0 : 危険
Score	7.6
Vector	AV:N/AC:H/Au:N/C:C/I:C/A:C

Affected System

Linux

Linux Kernel 4.10.15 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2017-10661	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10661
National Vulnerability Database (NVD)
2	CVE-2017-10661	https://nvd.nist.gov/vuln/detail/CVE-2017-10661

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-416	https://cwe.mitre.org/data/definitions/416.html

ベンダー情報

No	Name	URL
Android Open Source Project
1	Android Security Bulletin-August 2017	https://source.android.com/security/bulletin/2017-08-01
ChangeLog
2	ChangeLog-4.10.15	https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.15
GitHub
3	timerfd: Protect the might cancel mechanism proper	https://github.com/torvalds/linux/commit/1e38da300e1e395a15048b0af1e5305bd91402f6
Linux Kernel
4	Linux Kernel Archives	http://www.kernel.org
Linux kernel source tree
5	timerfd: Protect the might cancel mechanism proper	https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=1e38da300e1e395a15048b0af1e5305bd91402f6
Red Hat Bugzilla
6	Bug 1481136	https://bugzilla.redhat.com/show_bug.cgi?id=1481136

Change Log

No	Changed Details	Date of change
0	[2017年09月19日] 掲載	Feb. 17, 2018, 10:37 a.m.

NVD Vulnerability Information

CVE-2017-10661

Summary	Race condition in fs/timerfd.c in the Linux kernel before 4.10.15 allows local users to gain privileges or cause a denial of service (list corruption or use-after-free) via simultaneous file-descriptor operations that leverage improper might_cancel queueing.
Publication Date	Aug. 20, 2017, 3:29 a.m.
Registration Date	Jan. 26, 2021, 1:12 p.m.
Last Update	Nov. 21, 2024, 12:06 p.m.

Affected software configurations

Configuration1	or higher	or less	more than	less than
cpe:2.3:o:linux:linux_kernel::::::::	4.2			4.4.67
cpe:2.3:o:linux:linux_kernel::::::::	3.19			4.1.41
cpe:2.3:o:linux:linux_kernel::::::::	3.17			3.18.52
cpe:2.3:o:linux:linux_kernel::::::::				3.2.92
cpe:2.3:o:linux:linux_kernel::::::::	3.3			3.16.47
cpe:2.3:o:linux:linux_kernel::::::::	4.5			4.9.27
cpe:2.3:o:linux:linux_kernel::::::::	4.10			4.10.15

Configuration2	or higher	or less	more than	less than
cpe:2.3:o:redhat:enterprise_linux:7.0:::::::*
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:::::::*
cpe:2.3:o:redhat:enterprise_linux_aus:7.4:::::::*
cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:7.4:::::::*

Configuration3	or higher	or less	more than	less than
cpe:2.3:o:debian:debian_linux:8.0:::::::*
cpe:2.3:o:debian:debian_linux:9.0:::::::*

Related information, measures and tools

No	URL	タグ
1	http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=1e38da300e1e395a15048b0af1e5305bd91402f6	Issue Tracking Patch Third Party Advisory
2	http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=1e38da300e1e395a15048b0af1e5305bd91402f6	Issue Tracking Patch Third Party Advisory
3	http://www.debian.org/security/2017/dsa-3981	Mailing List Third Party Advisory
4	http://www.debian.org/security/2017/dsa-3981	Mailing List Third Party Advisory
5	http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.15	Release Notes Vendor Advisory
6	http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.15	Release Notes Vendor Advisory
7	http://www.securityfocus.com/bid/100215	Third Party Advisory VDB Entry
8	http://www.securityfocus.com/bid/100215	Third Party Advisory VDB Entry
9	https://access.redhat.com/errata/RHSA-2018:3083	Third Party Advisory
10	https://access.redhat.com/errata/RHSA-2018:3083	Third Party Advisory
11	https://access.redhat.com/errata/RHSA-2018:3096	Third Party Advisory
12	https://access.redhat.com/errata/RHSA-2018:3096	Third Party Advisory
13	https://access.redhat.com/errata/RHSA-2019:4057	Third Party Advisory
14	https://access.redhat.com/errata/RHSA-2019:4057	Third Party Advisory
15	https://access.redhat.com/errata/RHSA-2019:4058	Third Party Advisory
16	https://access.redhat.com/errata/RHSA-2019:4058	Third Party Advisory
17	https://access.redhat.com/errata/RHSA-2020:0036	Third Party Advisory
18	https://access.redhat.com/errata/RHSA-2020:0036	Third Party Advisory
19	https://bugzilla.redhat.com/show_bug.cgi?id=1481136	Issue Tracking
20	https://bugzilla.redhat.com/show_bug.cgi?id=1481136	Issue Tracking
21	https://github.com/torvalds/linux/commit/1e38da300e1e395a15048b0af1e5305bd91402f6	Issue Tracking Patch Third Party Advisory
22	https://github.com/torvalds/linux/commit/1e38da300e1e395a15048b0af1e5305bd91402f6	Issue Tracking Patch Third Party Advisory
23	https://source.android.com/security/bulletin/2017-08-01	Patch Vendor Advisory
24	https://source.android.com/security/bulletin/2017-08-01	Patch Vendor Advisory
25	https://www.exploit-db.com/exploits/43345/	Third Party Advisory VDB Entry
26	https://www.exploit-db.com/exploits/43345/	Third Party Advisory VDB Entry

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-416	解放済みメモリの使用	https://cwe.mitre.org/data/definitions/416.html