CVE-2017-3196

PCAUSA Rawether framework does not properly validate BPF data, allowing a crafted malicious BPF program to perform operations on memory outside of its typical bounds on the driver's receipt of network packets. Local attackers can exploit this issue to execute arbitrary code with SYSTEM privileges.

CVSS v3.0

7.8 HIGHCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.70% chance of exploitation in the next 30 days, 51th percentile

Published

2017-12-15

Updated

2024-08-05

Proof-of-concept exploits (1)

• http://blog.rewolf.pl/blog/?p=1778

References

• CVE Record
• NVD entry

Related

• CVE-2017-3195
• CVE-2017-3197
• CVE-2017-3165
• CVE-2017-3198
• CVE-2017-3164
• CVE-2017-3199