Update Sat Nov 23 22:33:05 UTC 2024

Author: trickest-workflows

2017/CVE-2017-12134.md

@@ -0,0 +1,17 @@
+### [CVE-2017-12134](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12134)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)
+
+### Description
+
+The xen_biovec_phys_mergeable function in drivers/xen/biomerge.c in Xen might allow local OS guest users to corrupt block device data streams and consequently obtain sensitive memory information, cause a denial of service, or gain host OS privileges by leveraging incorrect block IO merge-ability calculation.
+
+### POC
+
+#### Reference
+- https://usn.ubuntu.com/3655-1/
+
+#### Github
+No PoCs found on GitHub currently.
+

2017/CVE-2017-13220.md

@@ -12,6 +12,7 @@ An elevation of privilege vulnerability in the Upstream kernel bluez. Product: A
 #### Reference
 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=51bda2bca53b265715ca1852528f38dc67429d9a
 - https://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-13220.html
+- https://usn.ubuntu.com/3655-1/
 
 #### Github
 No PoCs found on GitHub currently.

2017/CVE-2017-13305.md

@@ -10,7 +10,7 @@ A information disclosure vulnerability in the Upstream kernel encrypted-keys. Pr
 ### POC
 
 #### Reference
-No PoCs from references.
+- https://usn.ubuntu.com/3655-1/
 
 #### Github
 - https://github.com/ARPSyndicate/cvemon

2017/CVE-2017-17449.md

@@ -10,7 +10,7 @@ The __netlink_deliver_tap_skb function in net/netlink/af_netlink.c in the Linux
 ### POC
 
 #### Reference
-No PoCs from references.
+- https://usn.ubuntu.com/3655-1/
 
 #### Github
 - https://github.com/ARPSyndicate/cvemon

2017/CVE-2017-18079.md

@@ -10,7 +10,7 @@ drivers/input/serio/i8042.c in the Linux kernel before 4.12.4 allows attackers t
 ### POC
 
 #### Reference
-No PoCs from references.
+- https://usn.ubuntu.com/3655-1/
 
 #### Github
 - https://github.com/ARPSyndicate/cvemon

2017/CVE-2017-18203.md

@@ -0,0 +1,17 @@
+### [CVE-2017-18203](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18203)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)
+
+### Description
+
+The dm_get_from_kobject function in drivers/md/dm.c in the Linux kernel before 4.14.3 allow local users to cause a denial of service (BUG) by leveraging a race condition with __dm_destroy during creation and removal of DM devices.
+
+### POC
+
+#### Reference
+- https://usn.ubuntu.com/3655-1/
+
+#### Github
+No PoCs found on GitHub currently.
+

2017/CVE-2017-18204.md

@@ -0,0 +1,17 @@
+### [CVE-2017-18204](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18204)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)
+
+### Description
+
+The ocfs2_setattr function in fs/ocfs2/file.c in the Linux kernel before 4.14.2 allows local users to cause a denial of service (deadlock) via DIO requests.
+
+### POC
+
+#### Reference
+- https://usn.ubuntu.com/3655-1/
+
+#### Github
+No PoCs found on GitHub currently.
+

2017/CVE-2017-18208.md

@@ -0,0 +1,17 @@
+### [CVE-2017-18208](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18208)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)
+
+### Description
+
+The madvise_willneed function in mm/madvise.c in the Linux kernel before 4.14.4 allows local users to cause a denial of service (infinite loop) by triggering use of MADVISE_WILLNEED for a DAX mapping.
+
+### POC
+
+#### Reference
+- https://usn.ubuntu.com/3655-1/
+
+#### Github
+No PoCs found on GitHub currently.
+

2017/CVE-2017-18221.md

@@ -0,0 +1,17 @@
+### [CVE-2017-18221](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18221)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)
+
+### Description
+
+The __munlock_pagevec function in mm/mlock.c in the Linux kernel before 4.11.4 allows local users to cause a denial of service (NR_MLOCK accounting corruption) via crafted use of mlockall and munlockall system calls.
+
+### POC
+
+#### Reference
+- https://usn.ubuntu.com/3655-1/
+
+#### Github
+No PoCs found on GitHub currently.
+

2018/CVE-2018-3639.md

@@ -12,6 +12,7 @@ Systems with microprocessors utilizing speculative execution and speculative exe
 #### Reference
 - https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0
 - https://seclists.org/bugtraq/2019/Jun/36
+- https://usn.ubuntu.com/3655-1/
 - https://usn.ubuntu.com/3777-3/
 - https://www.exploit-db.com/exploits/44695/
 - https://www.kb.cert.org/vuls/id/180049