In the Linux kernel before 4.13.5, a local user could create keyrings for other users via keyctl commands, setting unwanted defaults or causing a denial of service.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-18270.json"
[
{
"id": "CVE-2017-18270-0611692e",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@237bbd29f7a049d310d907f4b2716a7feef9abf3",
"target": {
"file": "security/keys/keyring.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"309238802899388815495837163075856185621",
"34984193364387550075376866910027348892",
"326970958472425411009334460633271405564",
"136112739674892389461732735063966041720",
"130596856341881130023481865054340368805",
"56398020517401373127247485946017445115",
"14171310171484498645055226807520733121",
"39178154899364052449996807503045771381",
"199287792017401741052443499158827014516",
"302513878609000271753182876408257916140",
"155468140378649497705339868496060478676"
]
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line"
},
{
"id": "CVE-2017-18270-29735a55",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@237bbd29f7a049d310d907f4b2716a7feef9abf3",
"target": {
"file": "security/keys/key.c",
"function": "key_alloc"
},
"digest": {
"function_hash": "169380165509863541829019144908276122754",
"length": 2695.0
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function"
},
{
"id": "CVE-2017-18270-b28cfe74",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@237bbd29f7a049d310d907f4b2716a7feef9abf3",
"target": {
"file": "security/keys/key.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"208257784356342177424908129758194772173",
"79548029411525878471696760434379951131",
"309406657481414393639386576356708183487",
"114205922927262862178778550338575965525"
]
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line"
},
{
"id": "CVE-2017-18270-b87624ed",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@237bbd29f7a049d310d907f4b2716a7feef9abf3",
"target": {
"file": "security/keys/internal.h"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"49196784738928358930549407909972431135",
"242246506132240192982003253725871442326",
"123652972303942437066245706732945885134",
"295039304206855046817606001364745996852"
]
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line"
},
{
"id": "CVE-2017-18270-cbc2266d",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@237bbd29f7a049d310d907f4b2716a7feef9abf3",
"target": {
"file": "security/keys/process_keys.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"216731796724144968641494667203009994506",
"281189922133649715071047789916813232752",
"267170970460924480000176400676455428002",
"1985219192793095243165243198504138031",
"307022809501753525853505845492916879479",
"135566694543986060359085218196930406671",
"249601073666989314031409314593749325638",
"221841069044864109830856462158134719512"
]
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line"
},
{
"id": "CVE-2017-18270-e9cd2cf5",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@237bbd29f7a049d310d907f4b2716a7feef9abf3",
"target": {
"file": "security/keys/keyring.c",
"function": "find_keyring_by_name"
},
"digest": {
"function_hash": "218739918464257121916164119291797648351",
"length": 779.0
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function"
},
{
"id": "CVE-2017-18270-f30dbcf5",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@237bbd29f7a049d310d907f4b2716a7feef9abf3",
"target": {
"file": "security/keys/process_keys.c",
"function": "install_user_keyrings"
},
"digest": {
"function_hash": "47628687130286439888141550102286167410",
"length": 1356.0
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function"
}
]