SecuritySpace - CVE-2017-8924

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2017-8924

Description: The edge_bulk_in_callback function in drivers/usb/serial/io_ti.c in the Linux kernel before 4.10.4 allows local users to obtain sensitive information (in the dmesg ringbuffer and syslog) from uninitialized kernel memory by using a crafted USB device (posing as an io_ti USB serial device) to trigger an integer underflow.

Test IDs: 1.3.6.1.4.1.25623.1.0.703886 1.3.6.1.4.1.25623.1.0.890993

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2017-8924
BugTraq ID: 98451
http://www.securityfocus.com/bid/98451
Debian Security Information: DSA-3886 (Google Search)
http://www.debian.org/security/2017/dsa-3886

CVE ID:	CVE-2017-8924
Description:	The edge_bulk_in_callback function in drivers/usb/serial/io_ti.c in the Linux kernel before 4.10.4 allows local users to obtain sensitive information (in the dmesg ringbuffer and syslog) from uninitialized kernel memory by using a crafted USB device (posing as an io_ti USB serial device) to trigger an integer underflow.
Test IDs:	1.3.6.1.4.1.25623.1.0.703886 1.3.6.1.4.1.25623.1.0.890993
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2017-8924 BugTraq ID: 98451 http://www.securityfocus.com/bid/98451 Debian Security Information: DSA-3886 (Google Search) http://www.debian.org/security/2017/dsa-3886