{"dataType": "CVE_RECORD", "containers": {"adp": [{"metrics": [{"cvssV3_0": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}, {"other": {"type": "Unknown", "content": {"data": "{\"description\":\"negligible\"}"}}}], "affected": [{"vendor": "canonical", "product": "linux-aws-5.4", "platforms": ["bionic"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-azure-4.15", "platforms": ["bionic"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-azure-5.4", "platforms": ["bionic"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-gcp-4.15", "platforms": ["bionic"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-gcp-5.4", "platforms": ["bionic"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-hwe-5.4", "platforms": ["bionic"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-ibm-5.4", "platforms": ["bionic"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-oracle-5.4", "platforms": ["bionic"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-raspi-5.4", "platforms": ["bionic"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux", "platforms": ["bionic", "focal", "jammy", "noble", "resolute", "trusty", "xenial"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-aws", "platforms": ["bionic", "focal", "jammy", "noble", "resolute", "trusty", "xenial"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-oracle", "platforms": ["bionic", "focal", "jammy", "noble", "resolute", "xenial"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-kvm", "platforms": ["bionic", "focal", "jammy", "xenial"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-aws-5.15", "platforms": ["focal"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-azure-5.15", "platforms": ["focal"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-azure-fde-5.15", "platforms": ["focal"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-bluefield", "platforms": ["focal"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-gcp-5.15", "platforms": ["focal"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-hwe-5.15", "platforms": ["focal"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-ibm-5.15", "platforms": ["focal"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-intel-iotg-5.15", "platforms": ["focal"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-iot", "platforms": ["focal"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-lowlatency-hwe-5.15", "platforms": ["focal"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-nvidia-tegra-5.15", "platforms": ["focal"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-oracle-5.15", "platforms": ["focal"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-riscv-5.15", "platforms": ["focal"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-xilinx-zynqmp", "platforms": ["focal", "jammy"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-ibm", "platforms": ["focal", "jammy", "noble", "resolute"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-raspi", "platforms": ["focal", "jammy", "noble", "resolute"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-azure", "platforms": ["focal", "jammy", "noble", "resolute", "trusty", "xenial"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-gcp", "platforms": ["focal", "jammy", "noble", "resolute", "xenial"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-allwinner-5.19", "platforms": ["jammy"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-aws-5.19", "platforms": ["jammy"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-aws-6.2", "platforms": ["jammy"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-aws-6.5", "platforms": ["jammy"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-aws-6.8", "platforms": ["jammy"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-azure-5.19", "platforms": ["jammy"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-azure-6.2", "platforms": ["jammy"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-azure-6.5", "platforms": ["jammy"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-azure-6.8", "platforms": ["jammy"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-azure-fde-5.19", "platforms": ["jammy"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-azure-fde-6.2", "platforms": ["jammy"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-azure-fde-6.8", "platforms": ["jammy"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-gcp-5.19", "platforms": ["jammy"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-gcp-6.2", "platforms": ["jammy"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-gcp-6.5", "platforms": ["jammy"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-gcp-6.8", "platforms": ["jammy"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-hwe-5.19", "platforms": ["jammy"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-hwe-6.2", "platforms": ["jammy"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-hwe-6.5", "platforms": ["jammy"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-hwe-6.8", "platforms": ["jammy"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-ibm-6.8", "platforms": ["jammy"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-intel-iot-realtime", "platforms": ["jammy"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-intel-iotg", "platforms": ["jammy"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-lowlatency-hwe-5.19", "platforms": ["jammy"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-lowlatency-hwe-6.2", "platforms": ["jammy"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-lowlatency-hwe-6.5", "platforms": ["jammy"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-lowlatency-hwe-6.8", "platforms": ["jammy"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-nvidia-6.2", "platforms": ["jammy"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-nvidia-6.5", "platforms": ["jammy"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-nvidia-6.8", "platforms": ["jammy"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-nvidia-tegra-igx", "platforms": ["jammy"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-oem-5.17", "platforms": ["jammy"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-oem-6.0", "platforms": ["jammy"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-oem-6.1", "platforms": ["jammy"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-oem-6.5", "platforms": ["jammy"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-oracle-6.5", "platforms": ["jammy"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-oracle-6.8", "platforms": ["jammy"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-riscv-5.19", "platforms": ["jammy"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-riscv-6.5", "platforms": ["jammy"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-riscv-6.8", "platforms": ["jammy"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-starfive-5.19", "platforms": ["jammy"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-starfive-6.2", "platforms": ["jammy"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-starfive-6.5", "platforms": ["jammy"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-gkeop", "platforms": ["jammy", "noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-lowlatency", "platforms": ["jammy", "noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-nvidia-tegra", "platforms": ["jammy", "noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-azure-fde", "platforms": ["jammy", "noble", "resolute"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-gke", "platforms": ["jammy", "noble", "resolute"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-nvidia", "platforms": ["jammy", "noble", "resolute"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-realtime", "platforms": ["jammy", "noble", "resolute"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-riscv", "platforms": ["jammy", "noble", "resolute"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-aws-6.14", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-aws-6.17", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-aws-7.0", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-azure-6.11", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-azure-6.14", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-azure-6.17", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-azure-7.0", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-azure-fde-6.14", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-azure-fde-6.17", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-azure-fde-7.0", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-azure-nvidia", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-azure-nvidia-6.14", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-gcp-6.11", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-gcp-6.14", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-gcp-6.17", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-gcp-7.0", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-hwe-6.11", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-hwe-6.14", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-hwe-6.17", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-hwe-7.0", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-intel", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-lowlatency-hwe-6.11", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-nvidia-6.11", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-nvidia-6.17", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-nvidia-7.0", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-nvidia-lowlatency", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-oem-6.11", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-oem-6.14", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-oem-6.17", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-oem-6.8", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-oracle-6.14", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-oracle-6.17", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-oracle-7.0", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-raspi-realtime", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-riscv-6.14", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-riscv-6.17", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-riscv-7.0", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-xilinx", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-nvidia-bos", "platforms": ["resolute"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-oem-7.0", "platforms": ["resolute"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-lts-xenial", "platforms": ["trusty"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-aws-hwe", "platforms": ["xenial"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-hwe", "platforms": ["xenial"], "defaultStatus": "affected"}], "references": [{"url": "https://ubuntu.com/security/CVE-2017-13693"}, {"url": "https://www.cve.org/CVERecord?id=CVE-2017-13693"}], "descriptions": [{"lang": "en", "value": "The acpi_ds_create_operands() function in drivers/acpi/acpica/dsutils.c in the Linux kernel through 4.12.9 does not flush the operand cache and causes a kernel stack dump, which allows local users to obtain sensitive information from kernel memory and bypass the KASLR protection mechanism (in the kernel through 4.9) via a crafted ACPI table."}], "providerMetadata": {"orgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc", "shortName": "canonical", "dateUpdated": "2017-08-25T08:29:00Z", "x_subShortName": "canonical"}}, {"metrics": [{"cvssV3_0": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 3.3, "attackVector": "LOCAL", "baseSeverity": "LOW", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}}, {"other": {"type": "Unknown", "content": {"data": "{\"description\":\"Moderate\"}"}}}], "affected": [{"vendor": "redhat", "product": "kernel", "platforms": ["cpe:/o:redhat:enterprise_linux:6"], "defaultStatus": "affected"}, {"vendor": "redhat", "product": "kernel-abi-whitelists", "platforms": ["cpe:/o:redhat:enterprise_linux:6"], "defaultStatus": "affected"}, {"vendor": "redhat", "product": "kernel-bootwrapper", "platforms": ["cpe:/o:redhat:enterprise_linux:6"], "defaultStatus": "affected"}, {"vendor": "redhat", "product": "kernel-debug", "platforms": ["cpe:/o:redhat:enterprise_linux:6"], "defaultStatus": "affected"}, {"vendor": "redhat", "product": "kernel-debug-devel", "platforms": ["cpe:/o:redhat:enterprise_linux:6"], "defaultStatus": "affected"}, {"vendor": "redhat", "product": "kernel-devel", "platforms": ["cpe:/o:redhat:enterprise_linux:6"], "defaultStatus": "affected"}, {"vendor": "redhat", "product": "kernel-doc", "platforms": ["cpe:/o:redhat:enterprise_linux:6"], "defaultStatus": "affected"}, {"vendor": "redhat", "product": "kernel-firmware", "platforms": ["cpe:/o:redhat:enterprise_linux:6"], "defaultStatus": "affected"}, {"vendor": "redhat", "product": "kernel-headers", "platforms": ["cpe:/o:redhat:enterprise_linux:6"], "defaultStatus": "affected"}, {"vendor": "redhat", "product": "kernel-kdump", "platforms": ["cpe:/o:redhat:enterprise_linux:6"], "defaultStatus": "affected"}, {"vendor": "redhat", "product": "kernel-kdump-devel", "platforms": ["cpe:/o:redhat:enterprise_linux:6"], "defaultStatus": "affected"}, {"vendor": "redhat", "product": "perf", "platforms": ["cpe:/o:redhat:enterprise_linux:6"], "defaultStatus": "affected"}, {"vendor": "redhat", "product": "python-perf", "platforms": ["cpe:/o:redhat:enterprise_linux:6"], "defaultStatus": "affected"}], "references": [{"url": "https://access.redhat.com/security/cve/CVE-2017-13693"}], "descriptions": [{"lang": "en", "value": "A flaw was found in the kernel's ACPI interpreter when it does not flush the operand cache and causes a kernel stack dump. This allows local users to obtain sensitive information from kernel memory and bypass the KASLR protection mechanism. \n            Red Hat Enterprise Linux 5 is now in Production 3 Phase of the support and maintenance life cycle. This has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/\n\nThe Red Hat Security Response Team has rated this issue as having moderate security impact.\n\nThe risks associated with fixing this bug are greater than the moderate severity security risk. We therefore currently have no plans to fix this flaw in Red Hat Enterprise Linux 5,6,7 and Red Hat Enterprise MRG."}], "providerMetadata": {"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", "dateUpdated": "2017-07-19T00:00:00Z", "x_subShortName": "redhat_6"}}, {"metrics": [{"cvssV3_0": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 3.3, "attackVector": "LOCAL", "baseSeverity": "LOW", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}}, {"other": {"type": "Unknown", "content": {"data": "{\"description\":\"Moderate\"}"}}}], "affected": [{"vendor": "redhat", "product": "acpica-tools", "platforms": ["cpe:/o:redhat:enterprise_linux:7"], "defaultStatus": "affected"}, {"vendor": "redhat", "product": "bpftool", "platforms": ["cpe:/o:redhat:enterprise_linux:7"], "defaultStatus": "affected"}, {"vendor": "redhat", "product": "kernel", "platforms": ["cpe:/o:redhat:enterprise_linux:7"], "defaultStatus": "affected"}, {"vendor": "redhat", "product": "kernel-abi-whitelists", "platforms": ["cpe:/o:redhat:enterprise_linux:7"], "defaultStatus": "affected"}, {"vendor": "redhat", "product": "kernel-bootwrapper", "platforms": ["cpe:/o:redhat:enterprise_linux:7"], "defaultStatus": "affected"}, {"vendor": "redhat", "product": "kernel-debug", "platforms": ["cpe:/o:redhat:enterprise_linux:7"], "defaultStatus": "affected"}, {"vendor": "redhat", "product": "kernel-debug-devel", "platforms": ["cpe:/o:redhat:enterprise_linux:7"], "defaultStatus": "affected"}, {"vendor": "redhat", "product": "kernel-devel", "platforms": ["cpe:/o:redhat:enterprise_linux:7"], "defaultStatus": "affected"}, {"vendor": "redhat", "product": "kernel-doc", "platforms": ["cpe:/o:redhat:enterprise_linux:7"], "defaultStatus": "affected"}, {"vendor": "redhat", "product": "kernel-headers", "platforms": ["cpe:/o:redhat:enterprise_linux:7"], "defaultStatus": "affected"}, {"vendor": "redhat", "product": "kernel-kdump", "platforms": ["cpe:/o:redhat:enterprise_linux:7"], "defaultStatus": "affected"}, {"vendor": "redhat", "product": "kernel-kdump-devel", "platforms": ["cpe:/o:redhat:enterprise_linux:7"], "defaultStatus": "affected"}, {"vendor": "redhat", "product": "kernel-rt", "platforms": ["cpe:/o:redhat:enterprise_linux:7"], "defaultStatus": "affected"}, {"vendor": "redhat", "product": "kernel-rt-debug", "platforms": ["cpe:/o:redhat:enterprise_linux:7"], "defaultStatus": "affected"}, {"vendor": "redhat", "product": "kernel-rt-debug-devel", "platforms": ["cpe:/o:redhat:enterprise_linux:7"], "defaultStatus": "affected"}, {"vendor": "redhat", "product": "kernel-rt-debug-kvm", "platforms": ["cpe:/o:redhat:enterprise_linux:7"], "defaultStatus": "affected"}, {"vendor": "redhat", "product": "kernel-rt-devel", "platforms": ["cpe:/o:redhat:enterprise_linux:7"], "defaultStatus": "affected"}, {"vendor": "redhat", "product": "kernel-rt-doc", "platforms": ["cpe:/o:redhat:enterprise_linux:7"], "defaultStatus": "affected"}, {"vendor": "redhat", "product": "kernel-rt-kvm", "platforms": ["cpe:/o:redhat:enterprise_linux:7"], "defaultStatus": "affected"}, {"vendor": "redhat", "product": "kernel-rt-trace", "platforms": ["cpe:/o:redhat:enterprise_linux:7"], "defaultStatus": "affected"}, {"vendor": "redhat", "product": "kernel-rt-trace-devel", "platforms": ["cpe:/o:redhat:enterprise_linux:7"], "defaultStatus": "affected"}, {"vendor": "redhat", "product": "kernel-rt-trace-kvm", "platforms": ["cpe:/o:redhat:enterprise_linux:7"], "defaultStatus": "affected"}, {"vendor": "redhat", "product": "kernel-tools", "platforms": ["cpe:/o:redhat:enterprise_linux:7"], "defaultStatus": "affected"}, {"vendor": "redhat", "product": "kernel-tools-libs", "platforms": ["cpe:/o:redhat:enterprise_linux:7"], "defaultStatus": "affected"}, {"vendor": "redhat", "product": "kernel-tools-libs-devel", "platforms": ["cpe:/o:redhat:enterprise_linux:7"], "defaultStatus": "affected"}, {"vendor": "redhat", "product": "perf", "platforms": ["cpe:/o:redhat:enterprise_linux:7"], "defaultStatus": "affected"}, {"vendor": "redhat", "product": "python-perf", "platforms": ["cpe:/o:redhat:enterprise_linux:7"], "defaultStatus": "affected"}], "references": [{"url": "https://access.redhat.com/security/cve/CVE-2017-13693"}], "descriptions": [{"lang": "en", "value": "A flaw was found in the kernel's ACPI interpreter when it does not flush the operand cache and causes a kernel stack dump. This allows local users to obtain sensitive information from kernel memory and bypass the KASLR protection mechanism. \n            Red Hat Enterprise Linux 5 is now in Production 3 Phase of the support and maintenance life cycle. This has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/\n\nThe Red Hat Security Response Team has rated this issue as having moderate security impact.\n\nThe risks associated with fixing this bug are greater than the moderate severity security risk. We therefore currently have no plans to fix this flaw in Red Hat Enterprise Linux 5,6,7 and Red Hat Enterprise MRG."}], "providerMetadata": {"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", "dateUpdated": "2017-07-19T00:00:00Z", "x_subShortName": "redhat_7"}}, {"metrics": [{"other": {"type": "Unknown", "content": {"data": "{\"description\":\"unimportant\"}"}}}], "affected": [{"vendor": "debian", "product": "acpica-unix", "platforms": ["bookworm", "forky", "sid", "trixie"], "defaultStatus": "unaffected"}, {"vendor": "debian", "product": "linux", "platforms": ["bookworm", "forky", "sid", "trixie"], "defaultStatus": "unaffected"}], "references": [{"url": "https://security-tracker.debian.org/tracker/CVE-2017-13693"}], "descriptions": [{"lang": "en", "value": "The acpi_ds_create_operands() function in drivers/acpi/acpica/dsutils.c in the Linux kernel through 4.12.9 does not flush the operand cache and causes a kernel stack dump, which allows local users to obtain sensitive information from kernel memory and bypass the KASLR protection mechanism (in the kernel through 4.9) via a crafted ACPI table."}], "providerMetadata": {"orgId": "79363d38-fa19-49d1-9214-5f28da3f3ac5", "shortName": "debian", "dateUpdated": "2017-08-25T07:00:00.000Z", "x_subShortName": "debian"}}, {"metrics": [{"other": {"type": "Unknown", "content": {"data": "{\"description\":\"unspecified\"}"}}}], "affected": [{"vendor": "fedora", "product": "kernel", "versions": [{"status": "affected", "version": "0", "lessThan": "0:4.12.11-200.fc25", "versionType": "rpm"}], "platforms": ["cpe:/o:fedoraproject:fedora:25"], "defaultStatus": "unaffected"}, {"vendor": "fedora", "product": "kernel", "versions": [{"status": "affected", "version": "0", "lessThan": "0:4.12.11-300.fc26", "versionType": "rpm"}], "platforms": ["cpe:/o:fedoraproject:fedora:26"], "defaultStatus": "unaffected"}, {"vendor": "fedora", "product": "acpica-tools", "versions": [{"status": "affected", "version": "0", "lessThan": "0:20180209-1.fc27", "versionType": "rpm"}], "platforms": ["cpe:/o:fedoraproject:fedora:27"], "defaultStatus": "unaffected"}, {"vendor": "fedora", "product": "acpica-tools", "versions": [{"status": "affected", "version": "0", "lessThan": "0:20180209-1.fc28", "versionType": "rpm"}], "platforms": ["cpe:/o:fedoraproject:fedora:28"], "defaultStatus": "unaffected"}], "references": [{"url": "https://bodhi.fedoraproject.org/updates/FEDORA-2017-6764d16965"}, {"url": "https://bodhi.fedoraproject.org/updates/FEDORA-2017-a3a8638a60"}, {"url": "https://bodhi.fedoraproject.org/updates/FEDORA-2018-7c2e0a998d"}, {"url": "https://bodhi.fedoraproject.org/updates/FEDORA-2018-8d90571cdf"}], "descriptions": [{"lang": "en", "value": "acpica-tools: various flaws"}, {"lang": "en", "value": "kernel: ACPI operand cache leak in dsutils.c"}, {"lang": "en", "value": "kernel: various flaws"}], "providerMetadata": {"orgId": "92fb86c3-55a5-4fb5-9c3f-4757b9e96dc5", "shortName": "fedora", "dateUpdated": "2017-09-11T22:35:36Z", "x_subShortName": "fedora"}}, {"metrics": [{"cvssV3_0": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 4.0, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}}, {"other": {"type": "Unknown", "content": {"data": "{\"description\":\"Low\"}"}}}], "affected": [{"vendor": "suse", "product": "kernel-default", "platforms": ["cpe:/o:suse:oes-release:23.4", "cpe:/o:suse:oes-release:24.4", "cpe:/o:suse:ses:7", "cpe:/o:suse:ses:7.1", "cpe:/o:suse:sle-module-basesystem:15", "cpe:/o:suse:sle-module-basesystem:15:sp2", "cpe:/o:suse:sle-module-basesystem:15:sp3", "cpe:/o:suse:sle-module-basesystem:15:sp4", "cpe:/o:suse:sle-module-basesystem:15:sp5", "cpe:/o:suse:sle-module-development-tools:15", "cpe:/o:suse:sle-module-development-tools:15:sp2", "cpe:/o:suse:sle-module-development-tools:15:sp3", "cpe:/o:suse:sle-module-development-tools:15:sp4", "cpe:/o:suse:sle-module-development-tools:15:sp5", "cpe:/o:suse:sle_hpc:15", "cpe:/o:suse:sle_hpc:15:sp2", "cpe:/o:suse:sle_hpc:15:sp3", "cpe:/o:suse:sle_hpc:15:sp4", "cpe:/o:suse:sle_hpc:15:sp5", "cpe:/o:suse:sle_rt:15:sp2", "cpe:/o:suse:sle_rt:15:sp3", "cpe:/o:suse:sled:15", "cpe:/o:suse:sled:15:sp2", "cpe:/o:suse:sled:15:sp3", "cpe:/o:suse:sled:15:sp4", "cpe:/o:suse:sled:15:sp5", "cpe:/o:suse:sles-ltss:15", "cpe:/o:suse:sles-ltss:15:sp2", "cpe:/o:suse:sles:15", "cpe:/o:suse:sles:15:sp2", "cpe:/o:suse:sles:15:sp3", "cpe:/o:suse:sles:15:sp4", "cpe:/o:suse:sles:15:sp5", "cpe:/o:suse:sles_sap:15", "cpe:/o:suse:sles_sap:15:sp2", "cpe:/o:suse:sles_sap:15:sp3", "cpe:/o:suse:sles_sap:15:sp4", "cpe:/o:suse:sles_sap:15:sp5", "cpe:/o:suse:suse-manager-proxy:4.1", "cpe:/o:suse:suse-manager-proxy:4.2", "cpe:/o:suse:suse-manager-proxy:4.3", "cpe:/o:suse:suse-manager-retail-branch-server:4.1", "cpe:/o:suse:suse-manager-retail-branch-server:4.2", "cpe:/o:suse:suse-manager-retail-branch-server:4.3"], "defaultStatus": "unaffected"}, {"vendor": "suse", "product": "kernel-default-devel", "platforms": ["cpe:/o:suse:oes-release:23.4", "cpe:/o:suse:oes-release:24.4", "cpe:/o:suse:ses:7", "cpe:/o:suse:ses:7.1", "cpe:/o:suse:sle-module-basesystem:15", "cpe:/o:suse:sle-module-basesystem:15:sp2", "cpe:/o:suse:sle-module-basesystem:15:sp3", "cpe:/o:suse:sle-module-basesystem:15:sp4", "cpe:/o:suse:sle-module-basesystem:15:sp5", "cpe:/o:suse:sle_hpc:15", "cpe:/o:suse:sle_hpc:15:sp2", "cpe:/o:suse:sle_hpc:15:sp3", "cpe:/o:suse:sle_hpc:15:sp4", "cpe:/o:suse:sle_hpc:15:sp5", "cpe:/o:suse:sle_rt:15:sp2", "cpe:/o:suse:sle_rt:15:sp3", "cpe:/o:suse:sled:15", "cpe:/o:suse:sled:15:sp2", "cpe:/o:suse:sled:15:sp3", "cpe:/o:suse:sled:15:sp4", "cpe:/o:suse:sled:15:sp5", "cpe:/o:suse:sles-ltss:15", "cpe:/o:suse:sles-ltss:15:sp2", "cpe:/o:suse:sles:15", "cpe:/o:suse:sles:15:sp2", "cpe:/o:suse:sles:15:sp3", "cpe:/o:suse:sles:15:sp4", "cpe:/o:suse:sles:15:sp5", "cpe:/o:suse:sles_sap:15", "cpe:/o:suse:sles_sap:15:sp2", "cpe:/o:suse:sles_sap:15:sp3", "cpe:/o:suse:sles_sap:15:sp4", "cpe:/o:suse:sles_sap:15:sp5", "cpe:/o:suse:suse-manager-proxy:4.1", "cpe:/o:suse:suse-manager-proxy:4.2", "cpe:/o:suse:suse-manager-proxy:4.3", "cpe:/o:suse:suse-manager-retail-branch-server:4.1", "cpe:/o:suse:suse-manager-retail-branch-server:4.2", "cpe:/o:suse:suse-manager-retail-branch-server:4.3"], "defaultStatus": "unaffected"}, {"vendor": "suse", "product": "kernel-devel", "platforms": ["cpe:/o:suse:oes-release:23.4", "cpe:/o:suse:oes-release:24.4", "cpe:/o:suse:ses:7", "cpe:/o:suse:ses:7.1", "cpe:/o:suse:sle-module-basesystem:15", "cpe:/o:suse:sle-module-basesystem:15:sp2", "cpe:/o:suse:sle-module-basesystem:15:sp3", "cpe:/o:suse:sle-module-basesystem:15:sp4", "cpe:/o:suse:sle-module-basesystem:15:sp5", "cpe:/o:suse:sle_hpc:15", "cpe:/o:suse:sle_hpc:15:sp2", "cpe:/o:suse:sle_hpc:15:sp3", "cpe:/o:suse:sle_hpc:15:sp4", "cpe:/o:suse:sle_hpc:15:sp5", "cpe:/o:suse:sle_rt:15:sp2", "cpe:/o:suse:sle_rt:15:sp3", "cpe:/o:suse:sled:15", "cpe:/o:suse:sled:15:sp2", "cpe:/o:suse:sled:15:sp3", "cpe:/o:suse:sled:15:sp4", "cpe:/o:suse:sled:15:sp5", "cpe:/o:suse:sles-ltss:15", "cpe:/o:suse:sles-ltss:15:sp2", "cpe:/o:suse:sles:15", "cpe:/o:suse:sles:15:sp2", "cpe:/o:suse:sles:15:sp3", "cpe:/o:suse:sles:15:sp4", "cpe:/o:suse:sles:15:sp5", "cpe:/o:suse:sles_sap:15", "cpe:/o:suse:sles_sap:15:sp2", "cpe:/o:suse:sles_sap:15:sp3", "cpe:/o:suse:sles_sap:15:sp4", "cpe:/o:suse:sles_sap:15:sp5", "cpe:/o:suse:suse-manager-proxy:4.1", "cpe:/o:suse:suse-manager-proxy:4.2", "cpe:/o:suse:suse-manager-proxy:4.3", "cpe:/o:suse:suse-manager-retail-branch-server:4.1", "cpe:/o:suse:suse-manager-retail-branch-server:4.2", "cpe:/o:suse:suse-manager-retail-branch-server:4.3"], "defaultStatus": "unaffected"}, {"vendor": "suse", "product": "kernel-macros", "platforms": ["cpe:/o:suse:oes-release:23.4", "cpe:/o:suse:oes-release:24.4", "cpe:/o:suse:ses:7", "cpe:/o:suse:ses:7.1", "cpe:/o:suse:sle-module-basesystem:15", "cpe:/o:suse:sle-module-basesystem:15:sp2", "cpe:/o:suse:sle-module-basesystem:15:sp3", "cpe:/o:suse:sle-module-basesystem:15:sp4", "cpe:/o:suse:sle-module-basesystem:15:sp5", "cpe:/o:suse:sle_hpc:15", "cpe:/o:suse:sle_hpc:15:sp2", "cpe:/o:suse:sle_hpc:15:sp3", "cpe:/o:suse:sle_hpc:15:sp4", "cpe:/o:suse:sle_hpc:15:sp5", "cpe:/o:suse:sle_rt:15:sp2", "cpe:/o:suse:sle_rt:15:sp3", "cpe:/o:suse:sled:15", "cpe:/o:suse:sled:15:sp2", "cpe:/o:suse:sled:15:sp3", "cpe:/o:suse:sled:15:sp4", "cpe:/o:suse:sled:15:sp5", "cpe:/o:suse:sles-ltss:15", "cpe:/o:suse:sles-ltss:15:sp2", "cpe:/o:suse:sles:15", "cpe:/o:suse:sles:15:sp2", "cpe:/o:suse:sles:15:sp3", "cpe:/o:suse:sles:15:sp4", "cpe:/o:suse:sles:15:sp5", "cpe:/o:suse:sles_sap:15", "cpe:/o:suse:sles_sap:15:sp2", "cpe:/o:suse:sles_sap:15:sp3", "cpe:/o:suse:sles_sap:15:sp4", "cpe:/o:suse:sles_sap:15:sp5", "cpe:/o:suse:suse-manager-proxy:4.1", "cpe:/o:suse:suse-manager-proxy:4.2", "cpe:/o:suse:suse-manager-proxy:4.3", "cpe:/o:suse:suse-manager-retail-branch-server:4.1", "cpe:/o:suse:suse-manager-retail-branch-server:4.2", "cpe:/o:suse:suse-manager-retail-branch-server:4.3"], "defaultStatus": "unaffected"}, {"vendor": "suse", "product": "kernel-source", "platforms": ["cpe:/o:suse:oes-release:23.4", "cpe:/o:suse:oes-release:24.4", "cpe:/o:suse:ses:7", "cpe:/o:suse:ses:7.1", "cpe:/o:suse:sle-module-development-tools:15", "cpe:/o:suse:sle-module-development-tools:15:sp2", "cpe:/o:suse:sle-module-development-tools:15:sp3", "cpe:/o:suse:sle-module-development-tools:15:sp4", "cpe:/o:suse:sle-module-development-tools:15:sp5", "cpe:/o:suse:sle_hpc:15", "cpe:/o:suse:sle_hpc:15:sp2", "cpe:/o:suse:sle_hpc:15:sp3", "cpe:/o:suse:sle_hpc:15:sp4", "cpe:/o:suse:sle_hpc:15:sp5", "cpe:/o:suse:sle_rt:15:sp2", "cpe:/o:suse:sle_rt:15:sp3", "cpe:/o:suse:sled:15", "cpe:/o:suse:sled:15:sp2", "cpe:/o:suse:sled:15:sp3", "cpe:/o:suse:sled:15:sp4", "cpe:/o:suse:sled:15:sp5", "cpe:/o:suse:sles-ltss:15", "cpe:/o:suse:sles-ltss:15:sp2", "cpe:/o:suse:sles:15", "cpe:/o:suse:sles:15:sp2", "cpe:/o:suse:sles:15:sp3", "cpe:/o:suse:sles:15:sp4", "cpe:/o:suse:sles:15:sp5", "cpe:/o:suse:sles_sap:15", "cpe:/o:suse:sles_sap:15:sp2", "cpe:/o:suse:sles_sap:15:sp3", "cpe:/o:suse:sles_sap:15:sp4", "cpe:/o:suse:sles_sap:15:sp5", "cpe:/o:suse:suse-manager-proxy:4.1", "cpe:/o:suse:suse-manager-proxy:4.2", "cpe:/o:suse:suse-manager-proxy:4.3", "cpe:/o:suse:suse-manager-retail-branch-server:4.1", "cpe:/o:suse:suse-manager-retail-branch-server:4.2", "cpe:/o:suse:suse-manager-retail-branch-server:4.3"], "defaultStatus": "unaffected"}, {"vendor": "suse", "product": "kernel-default-base", "platforms": ["cpe:/o:suse:sle-module-basesystem:15", "cpe:/o:suse:sle_hpc:15", "cpe:/o:suse:sled:15", "cpe:/o:suse:sles-ltss:15", "cpe:/o:suse:sles:15", "cpe:/o:suse:sles_sap:15"], "defaultStatus": "unaffected"}, {"vendor": "suse", "product": "kernel-default-man", "platforms": ["cpe:/o:suse:sle-module-basesystem:15", "cpe:/o:suse:sle_hpc:15", "cpe:/o:suse:sled:15", "cpe:/o:suse:sles-ltss:15", "cpe:/o:suse:sles:15", "cpe:/o:suse:sles_sap:15"], "defaultStatus": "unaffected"}, {"vendor": "suse", "product": "reiserfs-kmp-default", "platforms": ["cpe:/o:suse:sle_hpc:15", "cpe:/o:suse:sle_hpc:15:sp2", "cpe:/o:suse:sles-ltss:15", "cpe:/o:suse:sles-ltss:15:sp2", "cpe:/o:suse:sles:15", "cpe:/o:suse:sles:15:sp2", "cpe:/o:suse:sles_sap:15", "cpe:/o:suse:sles_sap:15:sp2", "cpe:/o:suse:sles_sap:15:sp3"], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "SUSE bug 1055713"}], "references": [{"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13693", "name": "Mitre CVE-2017-13693"}, {"url": "https://www.suse.com/security/cve/CVE-2017-13693", "name": "SUSE CVE-2017-13693"}], "descriptions": [{"lang": "en", "value": "\n    The acpi_ds_create_operands() function in drivers/acpi/acpica/dsutils.c in the Linux kernel through 4.12.9 does not flush the operand cache and causes a kernel stack dump, which allows local users to obtain sensitive information from kernel memory and bypass the KASLR protection mechanism (in the kernel through 4.9) via a crafted ACPI table.\n    "}], "providerMetadata": {"orgId": "404e59f5-483d-4b8a-8e7a-e67604dd8afb", "shortName": "suse", "dateUpdated": "2021-08-27T00:00:00Z", "x_subShortName": "suse_server_15"}}, {"metrics": [{"cvssV3_0": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 4.0, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}}, {"other": {"type": "Unknown", "content": {"data": "{\"description\":\"Low\"}"}}}], "affected": [{"vendor": "suse", "product": "kernel-default", "platforms": ["cpe:/o:suse:oes-release:23.4", "cpe:/o:suse:oes-release:24.4", "cpe:/o:suse:ses:7", "cpe:/o:suse:ses:7.1", "cpe:/o:suse:sle-module-basesystem:15", "cpe:/o:suse:sle-module-basesystem:15:sp2", "cpe:/o:suse:sle-module-basesystem:15:sp3", "cpe:/o:suse:sle-module-basesystem:15:sp4", "cpe:/o:suse:sle-module-basesystem:15:sp5", "cpe:/o:suse:sle-module-development-tools:15", "cpe:/o:suse:sle-module-development-tools:15:sp2", "cpe:/o:suse:sle-module-development-tools:15:sp3", "cpe:/o:suse:sle-module-development-tools:15:sp4", "cpe:/o:suse:sle-module-development-tools:15:sp5", "cpe:/o:suse:sle_hpc:15", "cpe:/o:suse:sle_hpc:15:sp2", "cpe:/o:suse:sle_hpc:15:sp3", "cpe:/o:suse:sle_hpc:15:sp4", "cpe:/o:suse:sle_hpc:15:sp5", "cpe:/o:suse:sled:15", "cpe:/o:suse:sled:15:sp2", "cpe:/o:suse:sled:15:sp3", "cpe:/o:suse:sled:15:sp4", "cpe:/o:suse:sled:15:sp5", "cpe:/o:suse:sles:15", "cpe:/o:suse:sles:15:sp2", "cpe:/o:suse:sles:15:sp3", "cpe:/o:suse:sles:15:sp4", "cpe:/o:suse:sles:15:sp5", "cpe:/o:suse:sles_sap:15", "cpe:/o:suse:sles_sap:15:sp2", "cpe:/o:suse:sles_sap:15:sp3", "cpe:/o:suse:sles_sap:15:sp4", "cpe:/o:suse:sles_sap:15:sp5", "cpe:/o:suse:suse-manager-proxy:4.1", "cpe:/o:suse:suse-manager-proxy:4.2", "cpe:/o:suse:suse-manager-proxy:4.3", "cpe:/o:suse:suse-manager-retail-branch-server:4.1", "cpe:/o:suse:suse-manager-retail-branch-server:4.2", "cpe:/o:suse:suse-manager-retail-branch-server:4.3"], "defaultStatus": "unaffected"}, {"vendor": "suse", "product": "kernel-default-devel", "platforms": ["cpe:/o:suse:oes-release:23.4", "cpe:/o:suse:oes-release:24.4", "cpe:/o:suse:ses:7", "cpe:/o:suse:ses:7.1", "cpe:/o:suse:sle-module-basesystem:15", "cpe:/o:suse:sle-module-basesystem:15:sp2", "cpe:/o:suse:sle-module-basesystem:15:sp3", "cpe:/o:suse:sle-module-basesystem:15:sp4", "cpe:/o:suse:sle-module-basesystem:15:sp5", "cpe:/o:suse:sle_hpc:15", "cpe:/o:suse:sle_hpc:15:sp2", "cpe:/o:suse:sle_hpc:15:sp3", "cpe:/o:suse:sle_hpc:15:sp4", "cpe:/o:suse:sle_hpc:15:sp5", "cpe:/o:suse:sled:15", "cpe:/o:suse:sled:15:sp2", "cpe:/o:suse:sled:15:sp3", "cpe:/o:suse:sled:15:sp4", "cpe:/o:suse:sled:15:sp5", "cpe:/o:suse:sles:15", "cpe:/o:suse:sles:15:sp2", "cpe:/o:suse:sles:15:sp3", "cpe:/o:suse:sles:15:sp4", "cpe:/o:suse:sles:15:sp5", "cpe:/o:suse:sles_sap:15", "cpe:/o:suse:sles_sap:15:sp2", "cpe:/o:suse:sles_sap:15:sp3", "cpe:/o:suse:sles_sap:15:sp4", "cpe:/o:suse:sles_sap:15:sp5", "cpe:/o:suse:suse-manager-proxy:4.1", "cpe:/o:suse:suse-manager-proxy:4.2", "cpe:/o:suse:suse-manager-proxy:4.3", "cpe:/o:suse:suse-manager-retail-branch-server:4.1", "cpe:/o:suse:suse-manager-retail-branch-server:4.2", "cpe:/o:suse:suse-manager-retail-branch-server:4.3"], "defaultStatus": "unaffected"}, {"vendor": "suse", "product": "kernel-devel", "platforms": ["cpe:/o:suse:oes-release:23.4", "cpe:/o:suse:oes-release:24.4", "cpe:/o:suse:ses:7", "cpe:/o:suse:ses:7.1", "cpe:/o:suse:sle-module-basesystem:15", "cpe:/o:suse:sle-module-basesystem:15:sp2", "cpe:/o:suse:sle-module-basesystem:15:sp3", "cpe:/o:suse:sle-module-basesystem:15:sp4", "cpe:/o:suse:sle-module-basesystem:15:sp5", "cpe:/o:suse:sle_hpc:15", "cpe:/o:suse:sle_hpc:15:sp2", "cpe:/o:suse:sle_hpc:15:sp3", "cpe:/o:suse:sle_hpc:15:sp4", "cpe:/o:suse:sle_hpc:15:sp5", "cpe:/o:suse:sled:15", "cpe:/o:suse:sled:15:sp2", "cpe:/o:suse:sled:15:sp3", "cpe:/o:suse:sled:15:sp4", "cpe:/o:suse:sled:15:sp5", "cpe:/o:suse:sles:15", "cpe:/o:suse:sles:15:sp2", "cpe:/o:suse:sles:15:sp3", "cpe:/o:suse:sles:15:sp4", "cpe:/o:suse:sles:15:sp5", "cpe:/o:suse:sles_sap:15", "cpe:/o:suse:sles_sap:15:sp2", "cpe:/o:suse:sles_sap:15:sp3", "cpe:/o:suse:sles_sap:15:sp4", "cpe:/o:suse:sles_sap:15:sp5", "cpe:/o:suse:suse-manager-proxy:4.1", "cpe:/o:suse:suse-manager-proxy:4.2", "cpe:/o:suse:suse-manager-proxy:4.3", "cpe:/o:suse:suse-manager-retail-branch-server:4.1", "cpe:/o:suse:suse-manager-retail-branch-server:4.2", "cpe:/o:suse:suse-manager-retail-branch-server:4.3"], "defaultStatus": "unaffected"}, {"vendor": "suse", "product": "kernel-macros", "platforms": ["cpe:/o:suse:oes-release:23.4", "cpe:/o:suse:oes-release:24.4", "cpe:/o:suse:ses:7", "cpe:/o:suse:ses:7.1", "cpe:/o:suse:sle-module-basesystem:15", "cpe:/o:suse:sle-module-basesystem:15:sp2", "cpe:/o:suse:sle-module-basesystem:15:sp3", "cpe:/o:suse:sle-module-basesystem:15:sp4", "cpe:/o:suse:sle-module-basesystem:15:sp5", "cpe:/o:suse:sle_hpc:15", "cpe:/o:suse:sle_hpc:15:sp2", "cpe:/o:suse:sle_hpc:15:sp3", "cpe:/o:suse:sle_hpc:15:sp4", "cpe:/o:suse:sle_hpc:15:sp5", "cpe:/o:suse:sled:15", "cpe:/o:suse:sled:15:sp2", "cpe:/o:suse:sled:15:sp3", "cpe:/o:suse:sled:15:sp4", "cpe:/o:suse:sled:15:sp5", "cpe:/o:suse:sles:15", "cpe:/o:suse:sles:15:sp2", "cpe:/o:suse:sles:15:sp3", "cpe:/o:suse:sles:15:sp4", "cpe:/o:suse:sles:15:sp5", "cpe:/o:suse:sles_sap:15", "cpe:/o:suse:sles_sap:15:sp2", "cpe:/o:suse:sles_sap:15:sp3", "cpe:/o:suse:sles_sap:15:sp4", "cpe:/o:suse:sles_sap:15:sp5", "cpe:/o:suse:suse-manager-proxy:4.1", "cpe:/o:suse:suse-manager-proxy:4.2", "cpe:/o:suse:suse-manager-proxy:4.3", "cpe:/o:suse:suse-manager-retail-branch-server:4.1", "cpe:/o:suse:suse-manager-retail-branch-server:4.2", "cpe:/o:suse:suse-manager-retail-branch-server:4.3"], "defaultStatus": "unaffected"}, {"vendor": "suse", "product": "kernel-source", "platforms": ["cpe:/o:suse:oes-release:23.4", "cpe:/o:suse:oes-release:24.4", "cpe:/o:suse:ses:7", "cpe:/o:suse:ses:7.1", "cpe:/o:suse:sle-module-development-tools:15", "cpe:/o:suse:sle-module-development-tools:15:sp2", "cpe:/o:suse:sle-module-development-tools:15:sp3", "cpe:/o:suse:sle-module-development-tools:15:sp4", "cpe:/o:suse:sle-module-development-tools:15:sp5", "cpe:/o:suse:sle_hpc:15", "cpe:/o:suse:sle_hpc:15:sp2", "cpe:/o:suse:sle_hpc:15:sp3", "cpe:/o:suse:sle_hpc:15:sp4", "cpe:/o:suse:sle_hpc:15:sp5", "cpe:/o:suse:sled:15", "cpe:/o:suse:sled:15:sp2", "cpe:/o:suse:sled:15:sp3", "cpe:/o:suse:sled:15:sp4", "cpe:/o:suse:sled:15:sp5", "cpe:/o:suse:sles:15", "cpe:/o:suse:sles:15:sp2", "cpe:/o:suse:sles:15:sp3", "cpe:/o:suse:sles:15:sp4", "cpe:/o:suse:sles:15:sp5", "cpe:/o:suse:sles_sap:15", "cpe:/o:suse:sles_sap:15:sp2", "cpe:/o:suse:sles_sap:15:sp3", "cpe:/o:suse:sles_sap:15:sp4", "cpe:/o:suse:sles_sap:15:sp5", "cpe:/o:suse:suse-manager-proxy:4.1", "cpe:/o:suse:suse-manager-proxy:4.2", "cpe:/o:suse:suse-manager-proxy:4.3", "cpe:/o:suse:suse-manager-retail-branch-server:4.1", "cpe:/o:suse:suse-manager-retail-branch-server:4.2", "cpe:/o:suse:suse-manager-retail-branch-server:4.3"], "defaultStatus": "unaffected"}, {"vendor": "suse", "product": "kernel-default-base", "platforms": ["cpe:/o:suse:sle-module-basesystem:15", "cpe:/o:suse:sle_hpc:15", "cpe:/o:suse:sled:15", "cpe:/o:suse:sles:15", "cpe:/o:suse:sles_sap:15"], "defaultStatus": "unaffected"}, {"vendor": "suse", "product": "kernel-default-man", "platforms": ["cpe:/o:suse:sle-module-basesystem:15", "cpe:/o:suse:sle_hpc:15", "cpe:/o:suse:sled:15", "cpe:/o:suse:sles:15", "cpe:/o:suse:sles_sap:15"], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "SUSE bug 1055713"}], "references": [{"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13693", "name": "Mitre CVE-2017-13693"}, {"url": "https://www.suse.com/security/cve/CVE-2017-13693", "name": "SUSE CVE-2017-13693"}], "descriptions": [{"lang": "en", "value": "\n    The acpi_ds_create_operands() function in drivers/acpi/acpica/dsutils.c in the Linux kernel through 4.12.9 does not flush the operand cache and causes a kernel stack dump, which allows local users to obtain sensitive information from kernel memory and bypass the KASLR protection mechanism (in the kernel through 4.9) via a crafted ACPI table.\n    "}], "providerMetadata": {"orgId": "404e59f5-483d-4b8a-8e7a-e67604dd8afb", "shortName": "suse", "dateUpdated": "2021-08-27T00:00:00Z", "x_subShortName": "suse_desktop_15"}}, {"metrics": [{"cvssV3_0": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 4.0, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}}, {"other": {"type": "Unknown", "content": {"data": "{\"description\":\"Low\"}"}}}], "affected": [{"vendor": "suse", "product": "kernel-default", "platforms": ["cpe:/o:suse:sle_hpc:11:sp4", "cpe:/o:suse:sles:11:sp1", "cpe:/o:suse:sles:11:sp3", "cpe:/o:suse:sles:11:sp4", "cpe:/o:suse:sles_sap:11:sp4"], "defaultStatus": "unaffected"}, {"vendor": "suse", "product": "kernel-source", "platforms": ["cpe:/o:suse:sle_hpc:11:sp4", "cpe:/o:suse:sles:11:sp1", "cpe:/o:suse:sles:11:sp3", "cpe:/o:suse:sles:11:sp4", "cpe:/o:suse:sles_sap:11:sp4"], "defaultStatus": "unaffected"}, {"vendor": "suse", "product": "kernel-default-base", "platforms": ["cpe:/o:suse:sle_hpc:11:sp4", "cpe:/o:suse:sles:11:sp3", "cpe:/o:suse:sles:11:sp4", "cpe:/o:suse:sles_sap:11:sp4"], "defaultStatus": "unaffected"}, {"vendor": "suse", "product": "kernel-default-devel", "platforms": ["cpe:/o:suse:sle_hpc:11:sp4", "cpe:/o:suse:sles:11:sp3", "cpe:/o:suse:sles:11:sp4", "cpe:/o:suse:sles_sap:11:sp4"], "defaultStatus": "unaffected"}, {"vendor": "suse", "product": "kernel-default-man", "platforms": ["cpe:/o:suse:sle_hpc:11:sp4", "cpe:/o:suse:sles:11:sp3", "cpe:/o:suse:sles:11:sp4", "cpe:/o:suse:sles_sap:11:sp4"], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "SUSE bug 1055713"}], "references": [{"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13693", "name": "Mitre CVE-2017-13693"}, {"url": "https://www.suse.com/security/cve/CVE-2017-13693", "name": "SUSE CVE-2017-13693"}], "descriptions": [{"lang": "en", "value": "\n    The acpi_ds_create_operands() function in drivers/acpi/acpica/dsutils.c in the Linux kernel through 4.12.9 does not flush the operand cache and causes a kernel stack dump, which allows local users to obtain sensitive information from kernel memory and bypass the KASLR protection mechanism (in the kernel through 4.9) via a crafted ACPI table.\n    "}], "providerMetadata": {"orgId": "404e59f5-483d-4b8a-8e7a-e67604dd8afb", "shortName": "suse", "dateUpdated": "2021-08-27T00:00:00Z", "x_subShortName": "suse_server_11"}}, {"metrics": [{"cvssV3_0": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 4.0, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}}, {"other": {"type": "Unknown", "content": {"data": "{\"description\":\"Low\"}"}}}], "affected": [{"vendor": "suse", "product": "kernel-default-base", "platforms": ["cpe:/o:suse:sle_hpc:12", "cpe:/o:suse:sle_hpc:12:sp2", "cpe:/o:suse:sle_hpc:12:sp4", "cpe:/o:suse:sle_hpc:12:sp5", "cpe:/o:suse:sles-bcl:12:sp2", "cpe:/o:suse:sles:12", "cpe:/o:suse:sles:12:sp2", "cpe:/o:suse:sles:12:sp4", "cpe:/o:suse:sles:12:sp5", "cpe:/o:suse:sles_sap:12", "cpe:/o:suse:sles_sap:12:sp4"], "defaultStatus": "unaffected"}, {"vendor": "suse", "product": "kernel-default-devel", "platforms": ["cpe:/o:suse:sle_hpc:12", "cpe:/o:suse:sle_hpc:12:sp2", "cpe:/o:suse:sle_hpc:12:sp4", "cpe:/o:suse:sle_hpc:12:sp5", "cpe:/o:suse:sles-bcl:12:sp2", "cpe:/o:suse:sles:12", "cpe:/o:suse:sles:12:sp2", "cpe:/o:suse:sles:12:sp4", "cpe:/o:suse:sles:12:sp5", "cpe:/o:suse:sles_sap:12", "cpe:/o:suse:sles_sap:12:sp4"], "defaultStatus": "unaffected"}, {"vendor": "suse", "product": "kernel-devel", "platforms": ["cpe:/o:suse:sle_hpc:12", "cpe:/o:suse:sle_hpc:12:sp2", "cpe:/o:suse:sle_hpc:12:sp4", "cpe:/o:suse:sle_hpc:12:sp5", "cpe:/o:suse:sles-bcl:12:sp2", "cpe:/o:suse:sles:12", "cpe:/o:suse:sles:12:sp2", "cpe:/o:suse:sles:12:sp4", "cpe:/o:suse:sles:12:sp5", "cpe:/o:suse:sles_sap:12", "cpe:/o:suse:sles_sap:12:sp4"], "defaultStatus": "unaffected"}, {"vendor": "suse", "product": "kernel-macros", "platforms": ["cpe:/o:suse:sle_hpc:12", "cpe:/o:suse:sle_hpc:12:sp2", "cpe:/o:suse:sle_hpc:12:sp4", "cpe:/o:suse:sle_hpc:12:sp5", "cpe:/o:suse:sles-bcl:12:sp2", "cpe:/o:suse:sles:12", "cpe:/o:suse:sles:12:sp2", "cpe:/o:suse:sles:12:sp4", "cpe:/o:suse:sles:12:sp5", "cpe:/o:suse:sles_sap:12", "cpe:/o:suse:sles_sap:12:sp4"], "defaultStatus": "unaffected"}, {"vendor": "suse", "product": "kernel-default", "platforms": ["cpe:/o:suse:sle_hpc:12", "cpe:/o:suse:sle_hpc:12:sp2", "cpe:/o:suse:sle_hpc:12:sp4", "cpe:/o:suse:sle_hpc:12:sp5", "cpe:/o:suse:sles-bcl:12:sp2", "cpe:/o:suse:sles:12", "cpe:/o:suse:sles:12:sp2", "cpe:/o:suse:sles:12:sp4", "cpe:/o:suse:sles:12:sp5", "cpe:/o:suse:sles_sap:12", "cpe:/o:suse:sles_sap:12:sp4", "cpe:/o:suse:sles_sap:12:sp5"], "defaultStatus": "unaffected"}, {"vendor": "suse", "product": "kernel-source", "platforms": ["cpe:/o:suse:sle_hpc:12", "cpe:/o:suse:sle_hpc:12:sp2", "cpe:/o:suse:sle_hpc:12:sp4", "cpe:/o:suse:sle_hpc:12:sp5", "cpe:/o:suse:sles-bcl:12:sp2", "cpe:/o:suse:sles:12", "cpe:/o:suse:sles:12:sp2", "cpe:/o:suse:sles:12:sp4", "cpe:/o:suse:sles:12:sp5", "cpe:/o:suse:sles_sap:12", "cpe:/o:suse:sles_sap:12:sp4", "cpe:/o:suse:sles_sap:12:sp5"], "defaultStatus": "unaffected"}, {"vendor": "suse", "product": "kernel-default-man", "platforms": ["cpe:/o:suse:sle_hpc:12", "cpe:/o:suse:sle_hpc:12:sp2", "cpe:/o:suse:sle_hpc:12:sp4", "cpe:/o:suse:sle_hpc:12:sp5", "cpe:/o:suse:sles:12", "cpe:/o:suse:sles:12:sp2", "cpe:/o:suse:sles:12:sp4", "cpe:/o:suse:sles:12:sp5", "cpe:/o:suse:sles_sap:12", "cpe:/o:suse:sles_sap:12:sp4"], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "SUSE bug 1055713"}], "references": [{"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13693", "name": "Mitre CVE-2017-13693"}, {"url": "https://www.suse.com/security/cve/CVE-2017-13693", "name": "SUSE CVE-2017-13693"}], "descriptions": [{"lang": "en", "value": "\n    The acpi_ds_create_operands() function in drivers/acpi/acpica/dsutils.c in the Linux kernel through 4.12.9 does not flush the operand cache and causes a kernel stack dump, which allows local users to obtain sensitive information from kernel memory and bypass the KASLR protection mechanism (in the kernel through 4.9) via a crafted ACPI table.\n    "}], "providerMetadata": {"orgId": "404e59f5-483d-4b8a-8e7a-e67604dd8afb", "shortName": "suse", "dateUpdated": "2021-08-27T00:00:00Z", "x_subShortName": "suse_server_12"}}, {"metrics": [{"cvssV3_0": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 4.0, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}}, {"other": {"type": "Unknown", "content": {"data": "{\"description\":\"Low\"}"}}}], "affected": [{"vendor": "suse", "product": "kernel-default", "platforms": ["cpe:/o:suse:sled:12:sp4"], "defaultStatus": "unaffected"}, {"vendor": "suse", "product": "kernel-source", "platforms": ["cpe:/o:suse:sled:12:sp4"], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "SUSE bug 1055713"}], "references": [{"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13693", "name": "Mitre CVE-2017-13693"}, {"url": "https://www.suse.com/security/cve/CVE-2017-13693", "name": "SUSE CVE-2017-13693"}], "descriptions": [{"lang": "en", "value": "\n    The acpi_ds_create_operands() function in drivers/acpi/acpica/dsutils.c in the Linux kernel through 4.12.9 does not flush the operand cache and causes a kernel stack dump, which allows local users to obtain sensitive information from kernel memory and bypass the KASLR protection mechanism (in the kernel through 4.9) via a crafted ACPI table.\n    "}], "providerMetadata": {"orgId": "404e59f5-483d-4b8a-8e7a-e67604dd8afb", "shortName": "suse", "dateUpdated": "2021-08-27T00:00:00Z", "x_subShortName": "suse_desktop_12"}}], "cna": {"metrics": [{"format": "CVSS", "cvssV2_0": {"version": "2.0", "baseScore": 4.9, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:C/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "COMPLETE"}}, {"format": "CVSS", "cvssV3_0": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}], "affected": [{"cpes": ["cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*"], "vendor": "linux", "product": "linux_kernel", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "4.12.9"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://github.com/acpica/acpica/pull/295/commits/987a3b5cf7175916e2a4b6ea5b8e70f830dfe732", "tags": ["issue-tracking", "patch", "third-party-advisory"]}, {"url": "https://patchwork.kernel.org/patch/9919053/", "tags": ["patch", "third-party-advisory"]}, {"url": "http://www.securityfocus.com/bid/100502", "tags": ["third-party-advisory", "vdb-entry"]}, {"url": "https://github.com/acpica/acpica/pull/295"}], "descriptions": [{"lang": "en", "value": "The acpi_ds_create_operands() function in drivers/acpi/acpica/dsutils.c in the Linux kernel through 4.12.9 does not flush the operand cache and causes a kernel stack dump, which allows local users to obtain sensitive information from kernel memory and bypass the KASLR protection mechanism (in the kernel through 4.9) via a crafted ACPI table."}, {"lang": "es", "value": "La función acpi_ds_create_operands() en drivers/acpi/acpica/dsutils.c en el kernel Linux en su versión 4.12.9 no vacía la caché operand y provoca un volcado de pila de kernel, lo que permite que usuarios locales obtengan información sensible de la memoria del kernel y omitan el mecanismo de protección KASLR (en la versión 4.9 del kernel) mediante una tabla ACPI manipulada."}], "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-200", "description": "CWE-200"}]}], "providerMetadata": {"orgId": "00000000-0000-4000-A000-000000000003", "shortName": "nvd", "dateUpdated": "2017-08-25T08:29:00Z", "x_subShortName": "nvd"}}}, "cveMetadata": {"cveId": "CVE-2017-13693", "state": "PUBLISHED", "dateUpdated": "2025-04-20T01:37:25Z", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "datePublished": "2017-08-25T08:29:00Z", "assignerShortName": "mitre"}, "dataVersion": "5.0"}