CVE-2017-18360

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In change_port_settings in drivers/usb/serial/io_ti.c in the Linux kernel before 4.11.3, local users could cause a denial of service by division-by-zero in the serial device layer by trying to set very high baud rates.

Metrics

CVSS 3.0 5.5/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-369

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6aeb75e6adfaed16e58780309613a578fe1ee90bPatch, Vendor Advisory
http://www.securityfocus.com/bid/106802Third Party Advisory, VDB Entry
https://bugzilla.suse.com/show_bug.cgi?id=1123706Issue Tracking, Third Party Advisory
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.11.3Release Notes, Vendor Advisory
https://github.com/torvalds/linux/commit/6aeb75e6adfaed16e58780309613a578fe1ee90bPatch, Third Party Advisory
https://usn.ubuntu.com/3933-1/Third Party Advisory
https://usn.ubuntu.com/3933-2/Third Party Advisory
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6aeb75e6adfaed16e58780309613a578fe1ee90bPatch, Vendor Advisory
http://www.securityfocus.com/bid/106802Third Party Advisory, VDB Entry
https://bugzilla.suse.com/show_bug.cgi?id=1123706Issue Tracking, Third Party Advisory
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.11.3Release Notes, Vendor Advisory
https://github.com/torvalds/linux/commit/6aeb75e6adfaed16e58780309613a578fe1ee90bPatch, Third Party Advisory
https://usn.ubuntu.com/3933-1/Third Party Advisory
https://usn.ubuntu.com/3933-2/Third Party Advisory

Timeline

Published: Jan 31, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-183617.5In Pylons Colander through 1.6, the URL validator allows an attacker to potentially cause an infinite loop thereby causing a denial of servi CVE-2017-183629.8ConnectWise ManagedITSync integration through 2017 for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct ac CVE-2017-183646.1phpFK lite has XSS via the faq.php, members.php, or search.php query string or the user.php user parameter.CVE-2017-183659.8The Management Console in GitHub Enterprise 2.8.x before 2.8.7 has a deserialization issue that allows unauthenticated remote attackers to e CVE-2017-183668.8Subrion CMS 4.1.5 has CSRF in blog/delete/.CVE-2017-183677.5libseccomp-golang 0.9.0 and earlier incorrectly generates BPFs that OR multiple arguments rather than ANDing them. A process running under a CVE-2017-183689.8The ZyXEL P660HN-T1A v1 TCLinux Fw $7.3.15.0 v001 / 3.40(ULM.0)b31 router distributed by TrueOnline has a command injection vulnerability in CVE-2017-183699.8The Billion 5200W-T 1.02b.rc5.dt49 router distributed by TrueOnline has a command injection vulnerability in the Remote System Log forwardin CVE-2017-183708.8The ZyXEL P660HN-T1A v2 TCLinux Fw #7.3.37.6 router distributed by TrueOnline has a command injection vulnerability in the Remote System Log CVE-2017-183719.8The ZyXEL P660HN-T1A v2 TCLinux Fw #7.3.37.6 router distributed by TrueOnline has three user accounts with default passwords, including two CVE-2017-183728.8The Billion 5200W-T TCLinux Fw $7.3.8.0 v008 130603 router distributed by TrueOnline has a command injection vulnerability in the Time Setti CVE-2017-183738.8The Billion 5200W-T TCLinux Fw $7.3.8.0 v008 130603 router distributed by TrueOnline has three user accounts with default passwords, includi