CVE-2017-5123 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	8.8 HIGH	LOCAL	LOW	LOW	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Chrome	CNA	---				---
CVE	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 82%

Vendor	Product	Version
linux	linux_kernel	4.13 ≤ 𝑥 < 4.13.7
netapp	cloud_backup	-
netapp	h300s_firmware	-
netapp	h500s_firmware	-
netapp	h700s_firmware	-
netapp	h300e_firmware	-
netapp	h500e_firmware	-
netapp	h700e_firmware	-
netapp	h410s_firmware	-

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

linux

bullseye	5.10.223-1 fixed
stretch	not-affected
jessie	not-affected
wheezy	not-affected
bullseye (security)	5.10.226-1 fixed
bookworm	6.1.106-3 fixed
bookworm (security)	6.1.112-1 fixed
trixie	6.11.5-1 fixed
sid	6.11.6-1 fixed

Ubuntu Releases

Ubuntu Product

Codename

linux

artful	Fixed 4.13.0-16.19 released
zesty	not-affected
xenial	not-affected
trusty	not-affected

linux-armadaxp

artful	dne
zesty	dne
xenial	dne
trusty	dne

linux-aws

artful	dne
zesty	dne
xenial	not-affected
trusty	not-affected

linux-azure

artful	dne
zesty	dne
xenial	not-affected
trusty	not-affected

linux-euclid

artful	dne
zesty	dne
xenial	not-affected
trusty	dne

linux-flo

artful	dne
zesty	dne
xenial	ignored
trusty	dne

linux-gcp

artful	dne
zesty	dne
xenial	not-affected
trusty	dne

linux-gke

artful	dne
zesty	dne
xenial	not-affected
trusty	dne

linux-goldfish

artful	dne
zesty	not-affected
xenial	not-affected
trusty	dne

linux-grouper

artful	dne
zesty	dne
xenial	dne
trusty	dne

linux-hwe

artful	dne
zesty	dne
xenial	not-affected
trusty	dne

linux-hwe-edge

artful	dne
zesty	dne
xenial	not-affected
trusty	dne

linux-kvm

artful	dne
zesty	dne
xenial	not-affected
trusty	dne

linux-linaro-omap

artful	dne
zesty	dne
xenial	dne
trusty	dne

linux-linaro-shared

artful	dne
zesty	dne
xenial	dne
trusty	dne

linux-linaro-vexpress

artful	dne
zesty	dne
xenial	dne
trusty	dne

linux-lts-quantal

artful	dne
zesty	dne
xenial	dne
trusty	dne

linux-lts-raring

artful	dne
zesty	dne
xenial	dne
trusty	dne

linux-lts-saucy

artful	dne
zesty	dne
xenial	dne
trusty	dne

linux-lts-trusty

artful	dne
zesty	dne
xenial	dne
trusty	dne

linux-lts-utopic

artful	dne
zesty	dne
xenial	dne
trusty	dne

linux-lts-vivid

artful	dne
zesty	dne
xenial	dne
trusty	dne

linux-lts-wily

artful	dne
zesty	dne
xenial	dne
trusty	dne

linux-lts-xenial

artful	dne
zesty	dne
xenial	dne
trusty	not-affected

linux-maguro

artful	dne
zesty	dne
xenial	dne
trusty	dne

linux-mako

artful	dne
zesty	dne
xenial	ignored
trusty	dne

linux-manta

artful	dne
zesty	dne
xenial	dne
trusty	dne

linux-oem

artful	dne
zesty	dne
xenial	not-affected
trusty	dne

linux-qcm-msm

artful	dne
zesty	dne
xenial	dne
trusty	dne

linux-raspi2

artful	Fixed 4.13.0-1005.5 released
zesty	not-affected
xenial	not-affected
trusty	dne

linux-snapdragon

artful	not-affected
zesty	not-affected
xenial	not-affected
trusty	dne

linux-ti-omap4

artful	dne
zesty	dne
xenial	dne
trusty	dne

Common Weakness Enumeration

CWE-20 - Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References

https://crbug.com/772848

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=96ca579a1ecc943b75beba58bebb0356f6cc4b51

https://security.netapp.com/advisory/ntap-20211223-0003/

https://crbug.com/772848

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=96ca579a1ecc943b75beba58bebb0356f6cc4b51

https://security.netapp.com/advisory/ntap-20211223-0003/