CVE-2017-5967

Aliases:UBUNTU-CVE-2017-5967DEBIAN-CVE-2017-5967
Advisory lineage Upstream: 0 Downstream: 3
Modified
Published: 14 Feb 2017, 06:30
Last modified:05 Aug 2024, 15:18

Vulnerability Summary

Overall Risk (default)
low
16/100
CVSS Score
4 MEDIUM
v3.0 (nvd)
EPSS Score
0.33% LOW
0% probability +0.29%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

14 Feb 2017, 06:30
Published
Vulnerability first disclosed
05 Aug 2024, 15:18
Last Modified
Vulnerability information updated

Description

The time subsystem in the Linux kernel through 4.9.9, when CONFIG_TIMER_STATS is enabled, allows local users to discover real PID values (as distinguished from PID values inside a PID namespace) by reading the /proc/timer_list file, related to the print_timer function in kernel/time/timer_list.c and the __timer_stats_timer_set_start_info function in kernel/time/timer.c.

CVSS Metrics

  • v3.0•MEDIUM•Score: 4CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
  • v2.0•LOW•Score: 2.1AV:L/AC:L/Au:N/C:P/I:N/A:N

EPSS Trends

Current EPSS score: 0.33%• Percentile: 27%

Techniques & Countermeasures

  • CWE-200•Exposure of Sensitive Information to an Unauthorized Actor

    The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Affected Systems

  • debian•linux

    < 4.9.13-1 | < 4.9.13-1 | < 4.9.13-1 | < 4.9.13-1

  • ubuntu•linux

    all | < 4.4.0-208.240

  • ubuntu•linux-aws

    < 4.4.0-1090.94 | < 4.4.0-1126.140

  • ubuntu•linux-azure-fde

    all

  • ubuntu•linux-azure-fde-5.15

    < 5.15.0-1114.123~20.04.1

  • ubuntu•linux-bluefield

    all

  • ubuntu•linux-fips

    < 4.4.0-1060.66 | all

  • ubuntu•linux-gcp

    < 4.13.0-1002.5

  • ubuntu•linux-hwe

    < 4.13.0-32.35~16.04.1

  • ubuntu•linux-intel-iot-realtime

    all

  • ubuntu•linux-kvm

    < 4.4.0-1091.100

  • ubuntu•linux-lts-xenial

    < 4.4.0-208.240~14.04.1

  • ubuntu•linux-raspi-realtime

    all

  • ubuntu•linux-raspi2

    < 4.4.0-1150.161

  • ubuntu•linux-realtime

    all

  • ubuntu•linux-riscv

    all

  • ubuntu•linux-snapdragon

    < 4.4.0-1154.164 | < 4.15.0-1053.57

  • linux•linux_kernel

    ≤ 4.9.9

References (7)