CVE-2017-6951

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

The keyring_search_aux function in security/keys/keyring.c in the Linux kernel through 3.14.79 allows local users to cause a denial of service (NULL pointer dereference and OOPS) via a request_key system call for the "dead" type.

Metrics

CVSS 3.0 5.5/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.securityfocus.com/bid/96943Third Party Advisory, VDB Entry
http://www.spinics.net/lists/keyrings/msg01845.htmlMailing List, Third Party Advisory
http://www.spinics.net/lists/keyrings/msg01846.htmlMailing List, Third Party Advisory
http://www.spinics.net/lists/keyrings/msg01849.htmlMailing List, Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:1842
https://access.redhat.com/errata/RHSA-2017:2077
https://access.redhat.com/errata/RHSA-2017:2669
http://www.securityfocus.com/bid/96943Third Party Advisory, VDB Entry
http://www.spinics.net/lists/keyrings/msg01845.htmlMailing List, Third Party Advisory
http://www.spinics.net/lists/keyrings/msg01846.htmlMailing List, Third Party Advisory
http://www.spinics.net/lists/keyrings/msg01849.htmlMailing List, Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:1842
https://access.redhat.com/errata/RHSA-2017:2077
https://access.redhat.com/errata/RHSA-2017:2669

Timeline

Published: Mar 16, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-69528.8Integer overflow in the cs_winkernel_malloc function in winkernel_mm.c in Capstone 3.0.4 and earlier allows attackers to cause a denial of s CVE-2017-69537.8Gemalto SmartDiag Diagnosis Tool v2.5 has a stack-based Buffer Overflow with SEH Overwrite via long "Register a new card" input fields. Ther CVE-2017-69544.3An issue was discovered in includes/component.php in the BuddyPress Docs plugin before 1.9.3 for WordPress. It is possible for authenticated CVE-2017-69555.3An issue was discovered in by-email/by-email.php in the Invite Anyone plugin before 1.3.15 for WordPress. A user is able to change the subje CVE-2017-69568.8On the Broadcom Wi-Fi HardMAC SoC with fbt firmware, a stack buffer overflow occurs when handling an 802.11r (FT) authentication response, l CVE-2017-69578.1Stack-based buffer overflow in the firmware in Broadcom Wi-Fi HardMAC SoC chips, when the firmware supports CCKM Fast and Secure Roaming and CVE-2017-69586.1An XSS vulnerability in the MantisBT Source Integration Plugin (before 2.0.2) search result page allows an attacker to inject arbitrary HTML CVE-2017-69607.5An issue was discovered in apng2gif 1.7. There is an integer overflow resulting in a heap-based buffer over-read, related to the load_apng f CVE-2017-69615.5An issue was discovered in apng2gif 1.7. There is improper sanitization of user input causing huge memory allocations, resulting in a crash.CVE-2017-69627.5An issue was discovered in apng2gif 1.7. There is an integer overflow resulting in a heap-based buffer overflow. This is related to the read CVE-2017-69647.8dmcrypt-get-device, as shipped in the eject package of Debian and Ubuntu, does not check the return value of the (1) setuid or (2) setgid fu CVE-2017-69655.5readelf in GNU Binutils 2.28 writes to illegal addresses while processing corrupt input files containing symbol-difference relocations, lead