CVE-2017-12188: linux linux_kernel Stack-based Buffer Overflow

Vulnerability summary

CVE-2017-12188 is a high (CVSS 7.8) Stack-based Buffer Overflow vulnerability in linux linux_kernel. EPSS estimates a 0.44% chance of exploitation in the next 30 days, higher than 38.4% of scored vulnerabilities.

Timeline

1. 11-10-2017
   PublishedVulnerability first disclosed.
2. 05-08-2024
   Last modifiedVulnerability information updated.

Description

arch/x86/kvm/mmu.c in the Linux kernel through 4.13.5, when nested virtualisation is used, does not properly traverse guest pagetable entries to resolve a guest virtual address, which allows L1 guest OS users to execute arbitrary code on the host OS or cause a denial of service (incorrect index during page walking, and host OS crash), aka an "MMU potential stack buffer overrun."

• CWE-121Stack-based Buffer OverflowThe product writes past the end of a buffer that was allocated on the stack.
• CWE-22Improper Limitation of a Pathname to a Restricted DirectoryThe product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.