CVE-2017-7273
Vulnerability Summary
Timeline
Description
The cp_report_fixup function in drivers/hid/hid-cypress.c in the Linux kernel 3.2 and 4.x before 4.9.4 allows physically proximate attackers to cause a denial of service (integer underflow) or possibly have unspecified other impact via a crafted HID report.
CVSS Metrics
- v3.0•MEDIUM•Score: 6.6CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- v2.0•MEDIUM•Score: 4.6AV:L/AC:L/Au:N/C:P/I:P/A:P
EPSS Trends
Current EPSS score: 0.45%• Percentile: 39%
Affected Systems
- debian•linux
< 4.9.6-1 | < 4.9.6-1 | < 4.9.6-1 | < 4.9.6-1
- ubuntu•linux
< 3.13.0-129.178 | < 4.4.0-63.84
- ubuntu•linux-aws
< 4.4.0-1003.12
- ubuntu•linux-azure
all
- ubuntu•linux-azure-6.11
all
- ubuntu•linux-azure-fde
all
- ubuntu•linux-azure-fde-5.15
all
- ubuntu•linux-gcp
all
- ubuntu•linux-gcp-6.11
all
- ubuntu•linux-gke
all
- ubuntu•linux-hwe
< 4.10.0-32.36~16.04.1 | all
- ubuntu•linux-hwe-6.11
all
- ubuntu•linux-hwe-edge
all
- ubuntu•linux-intel-iot-realtime
all
- ubuntu•linux-lowlatency-hwe-6.11
all
- ubuntu•linux-lts-xenial
< 4.4.0-63.84~14.04.2
- ubuntu•linux-oem
all
- ubuntu•linux-raspi-realtime
all
- ubuntu•linux-raspi2
< 4.4.0-1044.51 | all
- ubuntu•linux-realtime
all
- ubuntu•linux-riscv
all | all
- ubuntu•linux-snapdragon
< 4.4.0-1047.51
- linux•linux_kernel
4.0 | 4.0.0 | 4.0.2 | 4.0.3 | 4.0.4 | 4.0.5 | 4.0.6 | 4.0.7 | 4.0.8 | 4.0.9 | 4.10 | 4.12 | 4.13 | 4.14 | 4.15 | 4.16 | 4.17 | 4.18 | 4.19 | 4.1.10 | 4.1.11 | 4.1.12 | 4.1.13 | 4.1.14 | 4.1.15 | 4.1.16 | 4.1.17 | 4.1.18 | 4.1.19 | 4.1.20 | 4.1.21 | 4.1.22 | 4.1.23 | 4.1.33 | 4.20 | 4.2.1 | 4.2.2 | 4.2.3 | 4.2.4 | 4.2.5 | 4.2.7 | 4.2.8 | 4.3:rc7 | 4.3.0 | 4.3.1 | 4.3.2 | 4.3.3 | 4.3.5 | 4.3.6 | 4.4:rc8 | 4.4.0 | 4.4.1 | 4.4.2 | 4.4.3 | 4.4.4 | 4.4.5 | 4.4.6 | 4.4.7 | 4.4.8 | 4.4.9 | 4.4.22 | 4.4.23 | 4.4.24 | 4.4.25 | 4.4.26 | 4.4.27 | 4.4.28 | 4.4.32 | 4.5.0 | 4.5.0:rc7 | 4.5.1 | 4.5.2 | 4.5.3 | 4.5.4 | 4.5.5 | 4.5.7 | 4.6 | 4.6.2 | 4.6.3 | 4.6.4 | 4.6.5 | 4.6.6 | 4.6.7 | 4.7 | 4.7:rc6 | 4.7.4 | 4.7.6 | 4.8 | 4.8.1 | 4.8.2 | 4.8.3 | 4.8.4 | 4.8.5 | 4.8.6 | 4.8.7 | 4.8.8 | 4.8.9 | 4.8.10 | 4.8.11 | 4.8.12 | 4.8.14 | 4.8.16 | 4.8.17 | 4.9.1 | 4.9.2 | 4.9.3 | 4.10.1 | 4.10.2 | 4.10.4
References (11)
- http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.4
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=1ebb71143758f45dc0fa76e2f48429e13b16d110
- https://github.com/torvalds/linux/commit/1ebb71143758f45dc0fa76e2f48429e13b16d110
- http://www.securityfocus.com/bid/97190
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4faec4a2ef5dd481682cc155cb9ea14ba2534b76
- https://ubuntu.com/security/CVE-2017-7273
- https://ubuntu.com/security/notices/USN-3361-1
- https://ubuntu.com/security/notices/USN-3406-1
- https://ubuntu.com/security/notices/USN-3406-2
- https://www.cve.org/CVERecord?id=CVE-2017-7273
- https://security-tracker.debian.org/tracker/CVE-2017-7273