CVE-2017-15121
A non-privileged user is able to mount a fuse filesystem on RHEL 6 or 7 and crash a system if an...
A non-privileged user is able to mount a fuse filesystem on RHEL 6 or 7 and crash a system if an application punches a hole in a file that does not end aligned to a page boundary.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
5.5
A non-privileged user is able to mount a fuse filesystem on RHEL 6 or 7 and crash a system if an application punches a hole in a file that does not end aligned to a page boundary.
- Record
CVE-2017-15121- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 4.9 Medium
AV:L/AC:L/Au:N/C:N/I:N/A:C - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
A non-privileged user is able to mount a fuse filesystem on RHEL 6 or 7 and crash a system if an application punches a hole in a file that does not end aligned to a page boundary.
- Record
CVE-2017-15121- Weakness
- CWE-20
- Updated
- 2026-11-02
EUVDEUVD-2017-6582 No score
A non-privileged user is able to mount a fuse filesystem on RHEL 6 or 7 and crash a system if an application punches a hole in a file that does not end aligned to a page boundary.
- Record
EUVD-2017-6582- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-j44m-j98w-c9cw
5.5
A non-privileged user is able to mount a fuse filesystem on RHEL 6 or 7 and crash a system if an...
A non-privileged user is able to mount a fuse filesystem on RHEL 6 or 7 and crash a system if an application punches a hole in a file that does not end aligned to a page boundary.
- Record
GHSA-j44m-j98w-c9cw- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-20
- Updated
- 2026-11-02
OSV
5.5
A non-privileged user is able to mount a fuse filesystem on RHEL 6 or 7 and crash a system if an application punches a hole in a file that does not end aligned to a page boundary.
- Record
CVE-2017-15121- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2017-15121
5.5
A non-privileged user is able to mount a fuse filesystem on RHEL 6 or 7 and crash a system if an application punches a hole in a file that does not end aligned to a page boundary.
- Record
DEBIAN-CVE-2017-15121- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 4 moreShow less
OSVRHSA-2018:0676
7.8
Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update
- Record
RHSA-2018:0676- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2018:1062
7.8
Red Hat Security Advisory: kernel security, bug fix, and enhancement update
- Record
RHSA-2018:1062- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2018:1854
8.8
Red Hat Security Advisory: kernel security and bug fix update
- Record
RHSA-2018:1854- CVSS 3.0
- 8.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2017-15121
5.5
A non-privileged user is able to mount a fuse filesystem on RHEL 6 or 7 and crash a system if an application punches a hole in a file that does not end aligned to a page boundary.
- Record
UBUNTU-CVE-2017-15121- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
linuxDebian:12 |
before 3.11.5-1 | 3.11.5-1 |
linuxDebian:13 |
before 3.11.5-1 | 3.11.5-1 |
linuxDebian:14 |
before 3.11.5-1 | 3.11.5-1 |
kernel-rtRed Hat:rhel_extras_rt:7 From an advisory covering 29 CVEs |
before 0:3.10.0-862.rt56.804.el7 | 0:3.10.0-862.rt56.804.el7 |
kernel-rt-debugRed Hat:rhel_extras_rt:7 From an advisory covering 29 CVEs |
before 0:3.10.0-862.rt56.804.el7 | 0:3.10.0-862.rt56.804.el7 |
kernel-rt-debug-debuginfoRed Hat:rhel_extras_rt:7 From an advisory covering 29 CVEs |
before 0:3.10.0-862.rt56.804.el7 | 0:3.10.0-862.rt56.804.el7 |
kernel-rt-debug-develRed Hat:rhel_extras_rt:7 From an advisory covering 29 CVEs |
before 0:3.10.0-862.rt56.804.el7 | 0:3.10.0-862.rt56.804.el7 |
kernel-rt-debug-kvmRed Hat:rhel_extras_rt:7 From an advisory covering 29 CVEs |
before 0:3.10.0-862.rt56.804.el7 | 0:3.10.0-862.rt56.804.el7 |
kernel-rt-debug-kvm-debuginfoRed Hat:rhel_extras_rt:7 From an advisory covering 29 CVEs |
before 0:3.10.0-862.rt56.804.el7 | 0:3.10.0-862.rt56.804.el7 |
kernel-rt-debuginfoRed Hat:rhel_extras_rt:7 From an advisory covering 29 CVEs |
before 0:3.10.0-862.rt56.804.el7 | 0:3.10.0-862.rt56.804.el7 |
Show 159 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-rt-debuginfo-common-x86_64Red Hat:rhel_extras_rt:7 From an advisory covering 29 CVEs |
before 0:3.10.0-862.rt56.804.el7 | 0:3.10.0-862.rt56.804.el7 |
kernel-rt-develRed Hat:rhel_extras_rt:7 From an advisory covering 29 CVEs |
before 0:3.10.0-862.rt56.804.el7 | 0:3.10.0-862.rt56.804.el7 |
kernel-rt-docRed Hat:rhel_extras_rt:7 From an advisory covering 29 CVEs |
before 0:3.10.0-862.rt56.804.el7 | 0:3.10.0-862.rt56.804.el7 |
kernel-rt-kvmRed Hat:rhel_extras_rt:7 From an advisory covering 29 CVEs |
before 0:3.10.0-862.rt56.804.el7 | 0:3.10.0-862.rt56.804.el7 |
kernel-rt-kvm-debuginfoRed Hat:rhel_extras_rt:7 From an advisory covering 29 CVEs |
before 0:3.10.0-862.rt56.804.el7 | 0:3.10.0-862.rt56.804.el7 |
kernel-rt-traceRed Hat:rhel_extras_rt:7 From an advisory covering 29 CVEs |
before 0:3.10.0-862.rt56.804.el7 | 0:3.10.0-862.rt56.804.el7 |
kernel-rt-trace-debuginfoRed Hat:rhel_extras_rt:7 From an advisory covering 29 CVEs |
before 0:3.10.0-862.rt56.804.el7 | 0:3.10.0-862.rt56.804.el7 |
kernel-rt-trace-develRed Hat:rhel_extras_rt:7 From an advisory covering 29 CVEs |
before 0:3.10.0-862.rt56.804.el7 | 0:3.10.0-862.rt56.804.el7 |
kernel-rt-trace-kvmRed Hat:rhel_extras_rt:7 From an advisory covering 29 CVEs |
before 0:3.10.0-862.rt56.804.el7 | 0:3.10.0-862.rt56.804.el7 |
kernel-rt-trace-kvm-debuginfoRed Hat:rhel_extras_rt:7 From an advisory covering 29 CVEs |
before 0:3.10.0-862.rt56.804.el7 | 0:3.10.0-862.rt56.804.el7 |
kernelRed Hat:enterprise_linux:7::client From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
kernel-abi-whitelistsRed Hat:enterprise_linux:7::client From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
kernel-debugRed Hat:enterprise_linux:7::client From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
kernel-debug-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
kernel-debug-develRed Hat:enterprise_linux:7::client From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
kernel-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:7::client From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
kernel-develRed Hat:enterprise_linux:7::client From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
kernel-docRed Hat:enterprise_linux:7::client From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
kernel-headersRed Hat:enterprise_linux:7::client From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
kernel-toolsRed Hat:enterprise_linux:7::client From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
kernel-tools-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
kernel-tools-libsRed Hat:enterprise_linux:7::client From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
perfRed Hat:enterprise_linux:7::client From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
perf-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
python-perfRed Hat:enterprise_linux:7::client From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
python-perf-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
kernel-tools-libs-develRed Hat:enterprise_linux:7::client From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
kernelRed Hat:enterprise_linux:7::computenode From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
kernel-abi-whitelistsRed Hat:enterprise_linux:7::computenode From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
kernel-debugRed Hat:enterprise_linux:7::computenode From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
kernel-debug-debuginfoRed Hat:enterprise_linux:7::computenode From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
kernel-debug-develRed Hat:enterprise_linux:7::computenode From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
kernel-debuginfoRed Hat:enterprise_linux:7::computenode From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:7::computenode From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
kernel-develRed Hat:enterprise_linux:7::computenode From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
kernel-docRed Hat:enterprise_linux:7::computenode From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
kernel-headersRed Hat:enterprise_linux:7::computenode From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
kernel-toolsRed Hat:enterprise_linux:7::computenode From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
kernel-tools-debuginfoRed Hat:enterprise_linux:7::computenode From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
kernel-tools-libsRed Hat:enterprise_linux:7::computenode From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
perfRed Hat:enterprise_linux:7::computenode From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
perf-debuginfoRed Hat:enterprise_linux:7::computenode From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
python-perfRed Hat:enterprise_linux:7::computenode From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
python-perf-debuginfoRed Hat:enterprise_linux:7::computenode From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
kernel-tools-libs-develRed Hat:enterprise_linux:7::computenode From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
kernelRed Hat:enterprise_linux:7::server From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
kernel-abi-whitelistsRed Hat:enterprise_linux:7::server From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
kernel-bootwrapperRed Hat:enterprise_linux:7::server From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
kernel-debugRed Hat:enterprise_linux:7::server From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
kernel-debug-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
kernel-debug-develRed Hat:enterprise_linux:7::server From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
kernel-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
kernel-debuginfo-common-ppc64Red Hat:enterprise_linux:7::server From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
kernel-debuginfo-common-ppc64leRed Hat:enterprise_linux:7::server From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
kernel-debuginfo-common-s390xRed Hat:enterprise_linux:7::server From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:7::server From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
kernel-develRed Hat:enterprise_linux:7::server From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
kernel-docRed Hat:enterprise_linux:7::server From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
kernel-headersRed Hat:enterprise_linux:7::server From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
kernel-kdumpRed Hat:enterprise_linux:7::server From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
kernel-kdump-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
kernel-kdump-develRed Hat:enterprise_linux:7::server From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
kernel-toolsRed Hat:enterprise_linux:7::server From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
kernel-tools-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
kernel-tools-libsRed Hat:enterprise_linux:7::server From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
perfRed Hat:enterprise_linux:7::server From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
perf-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
python-perfRed Hat:enterprise_linux:7::server From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
python-perf-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
kernel-tools-libs-develRed Hat:enterprise_linux:7::server From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
kernelRed Hat:enterprise_linux:7::workstation From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
kernel-abi-whitelistsRed Hat:enterprise_linux:7::workstation From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
kernel-debugRed Hat:enterprise_linux:7::workstation From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
kernel-debug-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
kernel-debug-develRed Hat:enterprise_linux:7::workstation From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
kernel-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:7::workstation From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
kernel-develRed Hat:enterprise_linux:7::workstation From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
kernel-docRed Hat:enterprise_linux:7::workstation From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
kernel-headersRed Hat:enterprise_linux:7::workstation From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
kernel-toolsRed Hat:enterprise_linux:7::workstation From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
kernel-tools-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
kernel-tools-libsRed Hat:enterprise_linux:7::workstation From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
perfRed Hat:enterprise_linux:7::workstation From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
perf-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
python-perfRed Hat:enterprise_linux:7::workstation From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
python-perf-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
kernel-tools-libs-develRed Hat:enterprise_linux:7::workstation From an advisory covering 33 CVEs |
before 0:3.10.0-862.el7 | 0:3.10.0-862.el7 |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 18 CVEs |
before 0:2.6.32-754.el6 | 0:2.6.32-754.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 18 CVEs |
before 0:2.6.32-754.el6 | 0:2.6.32-754.el6 |
kernel-debuginfo-common-i686Red Hat:enterprise_linux:6::client From an advisory covering 18 CVEs |
before 0:2.6.32-754.el6 | 0:2.6.32-754.el6 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::client From an advisory covering 18 CVEs |
before 0:2.6.32-754.el6 | 0:2.6.32-754.el6 |
perf-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 18 CVEs |
before 0:2.6.32-754.el6 | 0:2.6.32-754.el6 |
python-perfRed Hat:enterprise_linux:6::client From an advisory covering 18 CVEs |
before 0:2.6.32-754.el6 | 0:2.6.32-754.el6 |
python-perf-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 18 CVEs |
before 0:2.6.32-754.el6 | 0:2.6.32-754.el6 |
kernelRed Hat:enterprise_linux:6::client From an advisory covering 18 CVEs |
before 0:2.6.32-754.el6 | 0:2.6.32-754.el6 |
kernel-abi-whitelistsRed Hat:enterprise_linux:6::client From an advisory covering 18 CVEs |
before 0:2.6.32-754.el6 | 0:2.6.32-754.el6 |
kernel-debugRed Hat:enterprise_linux:6::client From an advisory covering 18 CVEs |
before 0:2.6.32-754.el6 | 0:2.6.32-754.el6 |
kernel-debug-develRed Hat:enterprise_linux:6::client From an advisory covering 18 CVEs |
before 0:2.6.32-754.el6 | 0:2.6.32-754.el6 |
kernel-develRed Hat:enterprise_linux:6::client From an advisory covering 18 CVEs |
before 0:2.6.32-754.el6 | 0:2.6.32-754.el6 |
kernel-docRed Hat:enterprise_linux:6::client From an advisory covering 18 CVEs |
before 0:2.6.32-754.el6 | 0:2.6.32-754.el6 |
kernel-firmwareRed Hat:enterprise_linux:6::client From an advisory covering 18 CVEs |
before 0:2.6.32-754.el6 | 0:2.6.32-754.el6 |
kernel-headersRed Hat:enterprise_linux:6::client From an advisory covering 18 CVEs |
before 0:2.6.32-754.el6 | 0:2.6.32-754.el6 |
perfRed Hat:enterprise_linux:6::client From an advisory covering 18 CVEs |
before 0:2.6.32-754.el6 | 0:2.6.32-754.el6 |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 18 CVEs |
before 0:2.6.32-754.el6 | 0:2.6.32-754.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 18 CVEs |
before 0:2.6.32-754.el6 | 0:2.6.32-754.el6 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::computenode From an advisory covering 18 CVEs |
before 0:2.6.32-754.el6 | 0:2.6.32-754.el6 |
perf-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 18 CVEs |
before 0:2.6.32-754.el6 | 0:2.6.32-754.el6 |
python-perfRed Hat:enterprise_linux:6::computenode From an advisory covering 18 CVEs |
before 0:2.6.32-754.el6 | 0:2.6.32-754.el6 |
python-perf-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 18 CVEs |
before 0:2.6.32-754.el6 | 0:2.6.32-754.el6 |
kernelRed Hat:enterprise_linux:6::computenode From an advisory covering 18 CVEs |
before 0:2.6.32-754.el6 | 0:2.6.32-754.el6 |
kernel-abi-whitelistsRed Hat:enterprise_linux:6::computenode From an advisory covering 18 CVEs |
before 0:2.6.32-754.el6 | 0:2.6.32-754.el6 |
kernel-debugRed Hat:enterprise_linux:6::computenode From an advisory covering 18 CVEs |
before 0:2.6.32-754.el6 | 0:2.6.32-754.el6 |
kernel-debug-develRed Hat:enterprise_linux:6::computenode From an advisory covering 18 CVEs |
before 0:2.6.32-754.el6 | 0:2.6.32-754.el6 |
kernel-debuginfo-common-i686Red Hat:enterprise_linux:6::computenode From an advisory covering 18 CVEs |
before 0:2.6.32-754.el6 | 0:2.6.32-754.el6 |
kernel-develRed Hat:enterprise_linux:6::computenode From an advisory covering 18 CVEs |
before 0:2.6.32-754.el6 | 0:2.6.32-754.el6 |
kernel-docRed Hat:enterprise_linux:6::computenode From an advisory covering 18 CVEs |
before 0:2.6.32-754.el6 | 0:2.6.32-754.el6 |
kernel-firmwareRed Hat:enterprise_linux:6::computenode From an advisory covering 18 CVEs |
before 0:2.6.32-754.el6 | 0:2.6.32-754.el6 |
kernel-headersRed Hat:enterprise_linux:6::computenode From an advisory covering 18 CVEs |
before 0:2.6.32-754.el6 | 0:2.6.32-754.el6 |
perfRed Hat:enterprise_linux:6::computenode From an advisory covering 18 CVEs |
before 0:2.6.32-754.el6 | 0:2.6.32-754.el6 |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 18 CVEs |
before 0:2.6.32-754.el6 | 0:2.6.32-754.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 18 CVEs |
before 0:2.6.32-754.el6 | 0:2.6.32-754.el6 |
kernel-debuginfo-common-i686Red Hat:enterprise_linux:6::server From an advisory covering 18 CVEs |
before 0:2.6.32-754.el6 | 0:2.6.32-754.el6 |
kernel-debuginfo-common-ppc64Red Hat:enterprise_linux:6::server From an advisory covering 18 CVEs |
before 0:2.6.32-754.el6 | 0:2.6.32-754.el6 |
kernel-debuginfo-common-s390xRed Hat:enterprise_linux:6::server From an advisory covering 18 CVEs |
before 0:2.6.32-754.el6 | 0:2.6.32-754.el6 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::server From an advisory covering 18 CVEs |
before 0:2.6.32-754.el6 | 0:2.6.32-754.el6 |
kernel-kdump-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 18 CVEs |
before 0:2.6.32-754.el6 | 0:2.6.32-754.el6 |
perf-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 18 CVEs |
before 0:2.6.32-754.el6 | 0:2.6.32-754.el6 |
python-perfRed Hat:enterprise_linux:6::server From an advisory covering 18 CVEs |
before 0:2.6.32-754.el6 | 0:2.6.32-754.el6 |
python-perf-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 18 CVEs |
before 0:2.6.32-754.el6 | 0:2.6.32-754.el6 |
kernelRed Hat:enterprise_linux:6::server From an advisory covering 18 CVEs |
before 0:2.6.32-754.el6 | 0:2.6.32-754.el6 |
kernel-abi-whitelistsRed Hat:enterprise_linux:6::server From an advisory covering 18 CVEs |
before 0:2.6.32-754.el6 | 0:2.6.32-754.el6 |
kernel-bootwrapperRed Hat:enterprise_linux:6::server From an advisory covering 18 CVEs |
before 0:2.6.32-754.el6 | 0:2.6.32-754.el6 |
kernel-debugRed Hat:enterprise_linux:6::server From an advisory covering 18 CVEs |
before 0:2.6.32-754.el6 | 0:2.6.32-754.el6 |
kernel-debug-develRed Hat:enterprise_linux:6::server From an advisory covering 18 CVEs |
before 0:2.6.32-754.el6 | 0:2.6.32-754.el6 |
kernel-develRed Hat:enterprise_linux:6::server From an advisory covering 18 CVEs |
before 0:2.6.32-754.el6 | 0:2.6.32-754.el6 |
kernel-docRed Hat:enterprise_linux:6::server From an advisory covering 18 CVEs |
before 0:2.6.32-754.el6 | 0:2.6.32-754.el6 |
kernel-firmwareRed Hat:enterprise_linux:6::server From an advisory covering 18 CVEs |
before 0:2.6.32-754.el6 | 0:2.6.32-754.el6 |
kernel-headersRed Hat:enterprise_linux:6::server From an advisory covering 18 CVEs |
before 0:2.6.32-754.el6 | 0:2.6.32-754.el6 |
kernel-kdumpRed Hat:enterprise_linux:6::server From an advisory covering 18 CVEs |
before 0:2.6.32-754.el6 | 0:2.6.32-754.el6 |
kernel-kdump-develRed Hat:enterprise_linux:6::server From an advisory covering 18 CVEs |
before 0:2.6.32-754.el6 | 0:2.6.32-754.el6 |
perfRed Hat:enterprise_linux:6::server From an advisory covering 18 CVEs |
before 0:2.6.32-754.el6 | 0:2.6.32-754.el6 |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 18 CVEs |
before 0:2.6.32-754.el6 | 0:2.6.32-754.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 18 CVEs |
before 0:2.6.32-754.el6 | 0:2.6.32-754.el6 |
kernel-debuginfo-common-i686Red Hat:enterprise_linux:6::workstation From an advisory covering 18 CVEs |
before 0:2.6.32-754.el6 | 0:2.6.32-754.el6 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::workstation From an advisory covering 18 CVEs |
before 0:2.6.32-754.el6 | 0:2.6.32-754.el6 |
perf-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 18 CVEs |
before 0:2.6.32-754.el6 | 0:2.6.32-754.el6 |
python-perfRed Hat:enterprise_linux:6::workstation From an advisory covering 18 CVEs |
before 0:2.6.32-754.el6 | 0:2.6.32-754.el6 |
python-perf-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 18 CVEs |
before 0:2.6.32-754.el6 | 0:2.6.32-754.el6 |
kernelRed Hat:enterprise_linux:6::workstation From an advisory covering 18 CVEs |
before 0:2.6.32-754.el6 | 0:2.6.32-754.el6 |
kernel-abi-whitelistsRed Hat:enterprise_linux:6::workstation From an advisory covering 18 CVEs |
before 0:2.6.32-754.el6 | 0:2.6.32-754.el6 |
kernel-debugRed Hat:enterprise_linux:6::workstation From an advisory covering 18 CVEs |
before 0:2.6.32-754.el6 | 0:2.6.32-754.el6 |
kernel-debug-develRed Hat:enterprise_linux:6::workstation From an advisory covering 18 CVEs |
before 0:2.6.32-754.el6 | 0:2.6.32-754.el6 |
kernel-develRed Hat:enterprise_linux:6::workstation From an advisory covering 18 CVEs |
before 0:2.6.32-754.el6 | 0:2.6.32-754.el6 |
kernel-docRed Hat:enterprise_linux:6::workstation From an advisory covering 18 CVEs |
before 0:2.6.32-754.el6 | 0:2.6.32-754.el6 |
kernel-firmwareRed Hat:enterprise_linux:6::workstation From an advisory covering 18 CVEs |
before 0:2.6.32-754.el6 | 0:2.6.32-754.el6 |
kernel-headersRed Hat:enterprise_linux:6::workstation From an advisory covering 18 CVEs |
before 0:2.6.32-754.el6 | 0:2.6.32-754.el6 |
perfRed Hat:enterprise_linux:6::workstation From an advisory covering 18 CVEs |
before 0:2.6.32-754.el6 | 0:2.6.32-754.el6 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected | ||
| aliases, products | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2017-15121 is a medium vulnerability (CVSS 5.5) in Red Hat Enterprise Linux, published December 6, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.40%, the 34th percentile. Fixed in linux 3.11.5-1.
References
bugzilla.redhat.com/show_bug.cgi?id=1520893
access.redhat.com/errata/RHSA-2018:1854
access.redhat.com/errata/RHSA-2018:1062
access.redhat.com/errata/RHSA-2018:0676
securityfocus.com/bid/102128
support.f5.com/csp/article/K42142782?utm_source=f5support&%3Butm_medium=RSS
Show 194 moreShow less
nvd.nist.gov/vuln/detail/CVE-2017-15121
support.f5.com/csp/article/K42142782?utm_source=f5support&utm_medium=RSS
access.redhat.com/security/cve/CVE-2017-15121
github.com/advisories/GHSA-j44m-j98w-c9cw
security-tracker.debian.org/tracker/CVE-2017-15121
access.redhat.com/security/updates/classification
access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/7.5_Release_Notes/index.html
bugzilla.redhat.com/show_bug.cgi?id=1292927
bugzilla.redhat.com/show_bug.cgi?id=1324749
bugzilla.redhat.com/show_bug.cgi?id=1391490
bugzilla.redhat.com/show_bug.cgi?id=1401061
bugzilla.redhat.com/show_bug.cgi?id=1402885
bugzilla.redhat.com/show_bug.cgi?id=1430418
bugzilla.redhat.com/show_bug.cgi?id=1436798
bugzilla.redhat.com/show_bug.cgi?id=1448770
bugzilla.redhat.com/show_bug.cgi?id=1452589
bugzilla.redhat.com/show_bug.cgi?id=1462329
bugzilla.redhat.com/show_bug.cgi?id=1488329
bugzilla.redhat.com/show_bug.cgi?id=1489088
bugzilla.redhat.com/show_bug.cgi?id=1490781
bugzilla.redhat.com/show_bug.cgi?id=1491224
bugzilla.redhat.com/show_bug.cgi?id=1495089
bugzilla.redhat.com/show_bug.cgi?id=1500894
bugzilla.redhat.com/show_bug.cgi?id=1501878
bugzilla.redhat.com/show_bug.cgi?id=1503749
bugzilla.redhat.com/show_bug.cgi?id=1506255
bugzilla.redhat.com/show_bug.cgi?id=1507270
bugzilla.redhat.com/show_bug.cgi?id=1509264
bugzilla.redhat.com/show_bug.cgi?id=1514609
bugzilla.redhat.com/show_bug.cgi?id=1518274
bugzilla.redhat.com/show_bug.cgi?id=1518638
bugzilla.redhat.com/show_bug.cgi?id=1519160
bugzilla.redhat.com/show_bug.cgi?id=1519591
bugzilla.redhat.com/show_bug.cgi?id=1520328
bugzilla.redhat.com/show_bug.cgi?id=1523481
bugzilla.redhat.com/show_bug.cgi?id=1525218
bugzilla.redhat.com/show_bug.cgi?id=1525474
bugzilla.redhat.com/show_bug.cgi?id=1525762
bugzilla.redhat.com/show_bug.cgi?id=1525768
bugzilla.redhat.com/show_bug.cgi?id=1531135
bugzilla.redhat.com/show_bug.cgi?id=1531174
bugzilla.redhat.com/show_bug.cgi?id=1535315
bugzilla.redhat.com/show_bug.cgi?id=1539706
bugzilla.redhat.com/show_bug.cgi?id=1544612
bugzilla.redhat.com/show_bug.cgi?id=1548412
bugzilla.redhat.com/show_bug.cgi?id=1550811
security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0676.json
access.redhat.com/security/cve/CVE-2016-3672
cve.org/CVERecord?id=CVE-2016-3672
nvd.nist.gov/vuln/detail/CVE-2016-3672
hmarco.org/bugs/CVE-2016-3672-Unlimiting-the-stack-not-longer-disables-ASLR.html
seclists.org/bugtraq/2016/Apr/34
access.redhat.com/security/cve/CVE-2016-7913
cve.org/CVERecord?id=CVE-2016-7913
nvd.nist.gov/vuln/detail/CVE-2016-7913
access.redhat.com/security/cve/CVE-2016-8633
cve.org/CVERecord?id=CVE-2016-8633
nvd.nist.gov/vuln/detail/CVE-2016-8633
access.redhat.com/security/cve/CVE-2017-7294
cve.org/CVERecord?id=CVE-2017-7294
nvd.nist.gov/vuln/detail/CVE-2017-7294
access.redhat.com/security/cve/CVE-2017-8824
cve.org/CVERecord?id=CVE-2017-8824
nvd.nist.gov/vuln/detail/CVE-2017-8824
access.redhat.com/security/cve/CVE-2017-9725
cve.org/CVERecord?id=CVE-2017-9725
nvd.nist.gov/vuln/detail/CVE-2017-9725
source.android.com/security/bulletin/2017-09-01
access.redhat.com/security/cve/CVE-2017-12154
cve.org/CVERecord?id=CVE-2017-12154
nvd.nist.gov/vuln/detail/CVE-2017-12154
access.redhat.com/security/cve/CVE-2017-12190
cve.org/CVERecord?id=CVE-2017-12190
nvd.nist.gov/vuln/detail/CVE-2017-12190
access.redhat.com/security/cve/CVE-2017-13166
cve.org/CVERecord?id=CVE-2017-13166
nvd.nist.gov/vuln/detail/CVE-2017-13166
access.redhat.com/security/cve/CVE-2017-13305
bugzilla.redhat.com/show_bug.cgi?id=1581637
cve.org/CVERecord?id=CVE-2017-13305
nvd.nist.gov/vuln/detail/CVE-2017-13305
access.redhat.com/security/cve/CVE-2017-14140
cve.org/CVERecord?id=CVE-2017-14140
nvd.nist.gov/vuln/detail/CVE-2017-14140
access.redhat.com/security/cve/CVE-2017-15116
cve.org/CVERecord?id=CVE-2017-15116
nvd.nist.gov/vuln/detail/CVE-2017-15116
cve.org/CVERecord?id=CVE-2017-15121
access.redhat.com/security/cve/CVE-2017-15126
cve.org/CVERecord?id=CVE-2017-15126
nvd.nist.gov/vuln/detail/CVE-2017-15126
access.redhat.com/security/cve/CVE-2017-15127
cve.org/CVERecord?id=CVE-2017-15127
nvd.nist.gov/vuln/detail/CVE-2017-15127
access.redhat.com/security/cve/CVE-2017-15129
cve.org/CVERecord?id=CVE-2017-15129
nvd.nist.gov/vuln/detail/CVE-2017-15129
access.redhat.com/security/cve/CVE-2017-15265
cve.org/CVERecord?id=CVE-2017-15265
nvd.nist.gov/vuln/detail/CVE-2017-15265
access.redhat.com/security/cve/CVE-2017-15274
bugzilla.redhat.com/show_bug.cgi?id=1500391
cve.org/CVERecord?id=CVE-2017-15274
nvd.nist.gov/vuln/detail/CVE-2017-15274
access.redhat.com/security/cve/CVE-2017-17448
cve.org/CVERecord?id=CVE-2017-17448
nvd.nist.gov/vuln/detail/CVE-2017-17448
access.redhat.com/security/cve/CVE-2017-17449
cve.org/CVERecord?id=CVE-2017-17449
nvd.nist.gov/vuln/detail/CVE-2017-17449
access.redhat.com/security/cve/CVE-2017-17558
cve.org/CVERecord?id=CVE-2017-17558
nvd.nist.gov/vuln/detail/CVE-2017-17558
access.redhat.com/security/cve/CVE-2017-18017
cve.org/CVERecord?id=CVE-2017-18017
nvd.nist.gov/vuln/detail/CVE-2017-18017
access.redhat.com/security/cve/CVE-2017-18203
cve.org/CVERecord?id=CVE-2017-18203
nvd.nist.gov/vuln/detail/CVE-2017-18203
access.redhat.com/security/cve/CVE-2017-1000252
cve.org/CVERecord?id=CVE-2017-1000252
nvd.nist.gov/vuln/detail/CVE-2017-1000252
access.redhat.com/security/cve/CVE-2017-1000407
cve.org/CVERecord?id=CVE-2017-1000407
nvd.nist.gov/vuln/detail/CVE-2017-1000407
access.redhat.com/security/cve/CVE-2017-1000410
cve.org/CVERecord?id=CVE-2017-1000410
nvd.nist.gov/vuln/detail/CVE-2017-1000410
access.redhat.com/security/cve/CVE-2018-5750
cve.org/CVERecord?id=CVE-2018-5750
nvd.nist.gov/vuln/detail/CVE-2018-5750
access.redhat.com/security/cve/CVE-2018-6927
cve.org/CVERecord?id=CVE-2018-6927
nvd.nist.gov/vuln/detail/CVE-2018-6927
access.redhat.com/security/cve/CVE-2018-1000004
cve.org/CVERecord?id=CVE-2018-1000004
nvd.nist.gov/vuln/detail/CVE-2018-1000004
bugzilla.redhat.com/show_bug.cgi?id=1132610
bugzilla.redhat.com/show_bug.cgi?id=1334439
security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1062.json
access.redhat.com/security/cve/CVE-2017-5715
access.redhat.com/security/vulnerabilities/speculativeexecution
cve.org/CVERecord?id=CVE-2017-5715
nvd.nist.gov/vuln/detail/CVE-2017-5715
googleprojectzero.blogspot.com/2018/01/reading-privileged-memory-with-side.html
meltdownattack.com
spectreattack.com
access.redhat.com/security/cve/CVE-2017-5754
cve.org/CVERecord?id=CVE-2017-5754
nvd.nist.gov/vuln/detail/CVE-2017-5754
access.redhat.com/security/cve/CVE-2017-18270
cve.org/CVERecord?id=CVE-2017-18270
nvd.nist.gov/vuln/detail/CVE-2017-18270
kernsec.org/pipermail/linux-security-module-archive/2017-September/003318.html
git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=237bbd29f7a049d310d907f4b2716a7feef9abf3
access.redhat.com/security/cve/CVE-2018-1066
cve.org/CVERecord?id=CVE-2018-1066
nvd.nist.gov/vuln/detail/CVE-2018-1066
access.redhat.com/security/vulnerabilities/ssbd
access.redhat.com/documentation/en-US/red_hat_enterprise_linux/6/html/6.10_release_notes/index.html
access.redhat.com/documentation/en-US/red_hat_enterprise_linux/6/html/6.10_technical_notes/index.html
security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1854.json
access.redhat.com/security/cve/CVE-2012-6701
cve.org/CVERecord?id=CVE-2012-6701
nvd.nist.gov/vuln/detail/CVE-2012-6701
access.redhat.com/security/cve/CVE-2015-8830
cve.org/CVERecord?id=CVE-2015-8830
nvd.nist.gov/vuln/detail/CVE-2015-8830
seclists.org/oss-sec/2016/q2/479
bugs.chromium.org/p/project-zero/issues/detail?id=735
cve.org/CVERecord?id=CVE-2016-8650
nvd.nist.gov/vuln/detail/CVE-2016-8650
cve.org/CVERecord?id=CVE-2017-2671
nvd.nist.gov/vuln/detail/CVE-2017-2671
cve.org/CVERecord?id=CVE-2017-6001
nvd.nist.gov/vuln/detail/CVE-2017-6001
cve.org/CVERecord?id=CVE-2017-7308
nvd.nist.gov/vuln/detail/CVE-2017-7308
googleprojectzero.blogspot.com/2017/05/exploiting-linux-kernel-via-packet.html
cve.org/CVERecord?id=CVE-2017-7616
nvd.nist.gov/vuln/detail/CVE-2017-7616
cve.org/CVERecord?id=CVE-2017-7889
nvd.nist.gov/vuln/detail/CVE-2017-7889
cve.org/CVERecord?id=CVE-2017-8890
nvd.nist.gov/vuln/detail/CVE-2017-8890
cve.org/CVERecord?id=CVE-2017-9075
nvd.nist.gov/vuln/detail/CVE-2017-9075
cve.org/CVERecord?id=CVE-2017-9076
nvd.nist.gov/vuln/detail/CVE-2017-9076
bugs.chromium.org/p/project-zero/issues/detail?id=1528
software.intel.com/sites/default/files/managed/b9/f9/336983-Intel-Analysis-of-Speculative-Execution-Side-Channels-White-Paper.pdf
software.intel.com/sites/default/files/managed/c5/63/336996-Speculative-Execution-Side-Channel-Mitigations.pdf
intel.com/content/www/us/en/security-center/advisory/intel-sa-00115.html
ubuntu.com/security/CVE-2017-15121
Left out here: 62 references. The JSON record has them.