Red Hat, Inc. AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Red Hat, Inc. CWE-190

https://access.redhat.com/errata/RHSA-2019:0641 No Types Assigned

https://access.redhat.com/errata/RHSA-2019:0641 Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:0641 [No Types Assigned]

OR
     *cpe:2.3:a:redhat:enterprise_mrg:2.0:*:*:*:*:*:*:*
     *cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
     *cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

OR
     *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions up to (excluding) 4.12

(AV:L/AC:L/Au:N/C:C/I:C/A:C)

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-190

http://seclists.org/oss-sec/2017/q2/602 No Types Assigned

http://seclists.org/oss-sec/2017/q2/602 Mailing List, Patch, Third Party Advisory

http://www.securityfocus.com/bid/99299 No Types Assigned

http://www.securityfocus.com/bid/99299 Third Party Advisory, VDB Entry

http://www.securitytracker.com/id/1038787 No Types Assigned

http://www.securitytracker.com/id/1038787 Third Party Advisory, VDB Entry

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7482 No Types Assigned

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7482 Issue Tracking, Patch, Third Party Advisory

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=5f2f97656ada8d811d3c1bef503ced266fcd53a0 No Types Assigned

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=5f2f97656ada8d811d3c1bef503ced266fcd53a0 Patch, Vendor Advisory

https://www.debian.org/security/2017/dsa-3927 No Types Assigned

https://www.debian.org/security/2017/dsa-3927 Third Party Advisory

https://www.debian.org/security/2017/dsa-3945 No Types Assigned

https://www.debian.org/security/2017/dsa-3945 Third Party Advisory

http://www.securityfocus.com/bid/99299 [No Types Assigned]

http://www.securitytracker.com/id/1038787 [No Types Assigned]

https://www.debian.org/security/2017/dsa-3927 [No Types Assigned]

https://www.debian.org/security/2017/dsa-3945 [No Types Assigned]

In the Linux kernel before version 4.12, Keberos 5 tickets decoded when using the RXRPC keys incorrectly assumes the size of a field. This could lead to the size-remaining variable wrapping and the data pointer going over the end of the buffer. This could possibly lead to memory corruption and possible privilege escalation.

In the Linux kernel before version 4.12, Kerberos 5 tickets decoded when using the RXRPC keys incorrectly assumes the size of a field. This could lead to the size-remaining variable wrapping and the data pointer going over the end of the buffer. This could possibly lead to memory corruption and possible privilege escalation.