CVE-2017-7541 kernel: Possible heap buffer overflow in brcmf_cfg80211_mgmt_tx

CVE ID

CVE-2017-7541

DESCRIPTION

Kernel memory corruption due to a buffer overflow was found in
brcmf_cfg80211_mgmt_tx() function in Linux kernels from v3.9-rc1 to v4.13-rc1.
The vulnerability can be triggered by sending a crafted NL80211_CMD_FRAME
packet via netlink. This flaw is unlikely to be triggered remotely as certain
userspace code is needed for this. An unprivileged local user could use this
flaw to induce kernel memory corruption on the system, leading to a crash. Due
to the nature of the flaw, privilege escalation cannot be fully ruled out,
although it is unlikely.

CVSS3 Base Score    6.8

RESOLUTION

Fixed in latest Unitrends security update with
   kernel-2.6.32-696.13.2.el6

LINK TO ADVISORIES

Was this article helpful?
0 out of 0 found this helpful
Have more questions? Contact us