Sploitus

CVE-2017-1000380

No indexed exploits for CVE-2017-1000380 yet

sound/core/timer.c in the Linux kernel before 4.11.5 is vulnerable to a data race in the ALSA /dev/snd/timer driver resulting in local users being able to read information belonging to other users, i.e., uninitialized memory contents may be disclosed when a read and an ioctl happen at the same time.

Affected products
Alt Linux, Centos, Linux Kernel, Red Hat, Suse, Ubuntu
Linux Linux Kernel
≤ 4.11.4
CVSS 3.0
5.5 MEDIUM
EPSS
0.7% (51th percentile)
Weakness
CWE-200
NVD status
Modified
Published
2017-06-17
CVE-2017-1000380 at NVD
Authoritative description, scoring and affected products

No indexed exploits for CVE-2017-1000380 yet

Our index is partial: it proves presence, never absence

No exploit for CVE-2017-1000380 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.