CVE-2017-18270

HighCVSS 7.1/10Last modified Jun 17, 2026

Description

In the Linux kernel before 4.13.5, a local user could create keyrings for other users via keyctl commands, setting unwanted defaults or causing a denial of service.

Metrics

CVSS 3.0 7.1/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published
May 18, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-182716.5In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-22, an infinite loop vulnerability was found in the function ReadMIFFImage in coders/miff.c, whicCVE-2017-182726.5In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-25, there is a use-after-free in ReadOneMNGImage in coders/png.c, which allows attackers to causeCVE-2017-182736.5In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-22, an infinite loop vulnerability was found in the function ReadTXTImage in coders/txt.c, which CVE-2017-182747.8While iterating through the models contained in a fixed-size array in the actData structure, which also stores an incorrect number of modelsCVE-2017-182755.5A new account can be inserted into simContacts service using Android command line tool in Snapdragon Automobile, Snapdragon Mobile, SnapdragCVE-2017-182767.8Secure camera logic allows display/secure camera controllers to access HLOS memory during secure display or camera session in Snapdragon MobCVE-2017-182775.5When dynamic memory allocation fails, currently the process sleeps for one second and continues with infinite loop without retrying for memoCVE-2017-182787.8An integer underflow may occur due to lack of check when received data length from font_mgr_qsee_request_service is bigger than the minimal CVE-2017-182797.8Lack of check of buffer length before copying can lead to buffer overflow in camera module in Small Cell SoC, Snapdragon Mobile, Snapdragon CVE-2017-182807.8In Snapdragon (Automobile, Mobile, Wear) in version MDM9607, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 4CVE-2017-182815.5A bool variable in Video function, which gets typecasted to int before being read could result in an out of bound read access in all AndroidCVE-2017-182827.8Non-secure SW can cause SDCC to generate secure bus accesses, which may expose RPM access in Snapdragon Mobile, Snapdragon Wear in version M
CVE-2017-18270: High severity, CVSS 7.1 | Vulnix