CVE-2017-9605
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2017-9605
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The vmw_gb_surface_define_ioctl function (accessible via DRM_IOCTL_VMW_GB_SURFACE_CREATE) in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux kernel through 4.11.4 defines a backup_handle variable but does not give it an initial value. If one attempts to create a GB surface, with a previously allocated DMA buffer to be used as a backup buffer, the backup_handle variable does not get written to and is then later returned to user space, allowing local users to obtain sensitive information from uninitialized kernel memory via a crafted ioctl call.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。 Linux kernel 4.11.4及之前的版本中的drivers/gpu/drm/vmwgfx/vmwgfx_surface.c文件的‘vmw_gb_surface_define_ioctl’函数存在安全漏洞。本地攻击者可借助特制的ioctl调用利用该漏洞获取未初始化内核内存中的敏感信息。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2017-9605
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2017-9605
请登录查看更多情报信息。
Same Patch Batch · n/a · 2017-06-13 · 62 CVEs total
| CVE-2017-6673 | Cisco Firepower Management Center 信息泄露漏洞 | |
| CVE-2017-6691 | Cisco Elastic Services Controller ConfD CLI 信息泄露漏洞 | |
| CVE-2017-6694 | Cisco Ultra Services Platform 信息泄露漏洞 | |
| CVE-2017-6693 | Cisco Elastic Services Controller ConfD服务器组件安全漏洞 | |
| CVE-2017-6692 | Cisco Ultra Services Framework Element Manager 安全漏洞 | |
| CVE-2017-6682 | Cisco Elastic Services Controller ConfD CLI 操作系统命令注入漏洞 | |
| CVE-2017-6681 | Cisco Ultra Services Framework 信息泄露漏洞 | |
| CVE-2017-6680 | Cisco Ultra Services Framework 安全漏洞 | |
| CVE-2017-6675 | Cisco Industrial Network Director 跨站脚本漏洞 | |
| CVE-2017-6674 | Cisco Firepower System Software 安全漏洞 | |
| CVE-2017-6683 | Cisco Elastic Services Controller 安全漏洞 | |
| CVE-2017-6671 | Cisco Email Security Appliance AsyncOS Software 输入验证漏洞 | |
| CVE-2017-6670 | Cisco Unified Communications Domain Manager 安全漏洞 | |
| CVE-2017-6668 | Cisco Unified Communications Domain Manager SQL注入漏洞 | |
| CVE-2017-6667 | Cisco Context Service SDK 输入验证漏洞 | |
| CVE-2017-6666 | Cisco Network Convergence System 5500 Series IOS XR Software forwarding组件资源管理错误漏洞 | |
| CVE-2017-6661 | Cisco Email Security和Content Security Management Appliance 跨站脚本漏洞 | |
| CVE-2017-6659 | Cisco Prime Collaboration Assurance 跨站请求伪造漏洞 | |
| CVE-2017-6656 | Cisco IP Phone 8800 Series 安全漏洞 | |
| CVE-2017-6655 | Cisco NX-OS Software 安全漏洞 |
Showing top 20 of 62 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8276
bettercap MySQL Server mysql_server.go integer coercion - CVE-2026-8275
bettercap zerogod IPP Service zerogod_ipp_primitives.go ippR - CVE-2026-8270
Open5GS SMF ogs_nas_parse_qos_rules denial of service - CVE-2026-8269
Open5GS SMF smf_nsmf_handle_create_sm_context denial of serv - CVE-2026-8268
Open5GS SMF OpenAPI_list_create denial of service
V. Comments for CVE-2017-9605
No comments yet