CVE-2017-7273

Published Mar 27, 2017

Last updated 4 years ago

Overview

Description
The cp_report_fixup function in drivers/hid/hid-cypress.c in the Linux kernel 3.2 and 4.x before 4.9.4 allows physically proximate attackers to cause a denial of service (integer underflow) or possibly have unspecified other impact via a crafted HID report.
Source
cve@mitre.org
NVD status
Modified

Social media

Hype score
Not currently trending

Risk scores

CVSS 3.0

Type
Primary
Base score
6.6
Impact score
5.9
Exploitability score
0.7
Vector string
CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity
MEDIUM

CVSS 2.0

Type
Primary
Base score
4.6
Impact score
6.4
Exploitability score
3.9
Vector string
AV:L/AC:L/Au:N/C:P/I:P/A:P

Weaknesses

nvd@nist.gov
NVD-CWE-Other

Evaluator

Comment
<a href="http://cwe.mitre.org/data/definitions/191.html">CWE-191: Integer Underflow (Wrap or Wraparound)</a>
Impact
-
Solution
-

Configurations