Off-by-one error in the pipeadvance function in lib/ioviter.c in the Linux kernel before 4.9.5 allows local users to obtain sensitive information from uninitialized heap-memory locations in opportunistic circumstances by reading from a pipe after an incorrect buffer-release decision.
[
{
"digest": {
"line_hashes": [
"297997695721246534379705660160303131681",
"40343808744195651702249002087291441363",
"204321086461590859338304215731269892084",
"44343713334832012228550910425775538057",
"270446243464136826250524432337912386936",
"255379417040540974533018252258001390281",
"51571422041789275713666432454310148337",
"293876516442614475734387653228666877116",
"176541944315832830575618697281534418165",
"199909077734520217835912858764318276812",
"108704331415802027365606746178810042470",
"30674977824927076222883503021411295618",
"204142214494156336500961059725531152401",
"210770623379365366926146644589245249011",
"52260857112631406271949716075033698843",
"291208893843882585634873089879303079490",
"256635468672702379316525391243538500302",
"332245985420760904341495262317453262864",
"290137350601583991642651533172274201140",
"52588158917067304110886597145611045048",
"177854910309745016587063749170879980373",
"43567700291938661204447441027177362138",
"105588719227677011370856154684012965442",
"282146234854327648499574282324457509846",
"334536785202219119567760456111677878641",
"335516310016971746305045929753743413551",
"216429129836573788257682481657015472507",
"322569882250435207699311410302666416453",
"274171869554745901257960499783775726361",
"281078893681408575827586009904707497554",
"163563533856046461902027339289584445821",
"176045888787007200383267221620941107643",
"42923703080139950559174484145217494445",
"202222755583746811844065823796906073175",
"115522868564724831031275273006618853653",
"326395509076236888114044550516673957837",
"179063126790026211379425705637487659478",
"9343033378790229573115724776497783950",
"269456077029181725505560922893823087521",
"225366560384155702678029583716936251700",
"226583755473542292929514505021413011762"
],
"threshold": 0.9
},
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"id": "CVE-2017-5550-1b352a5d",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@b9dc6f65bc5e232d1c05fe34b5daadc7e8bbf1fb",
"target": {
"file": "lib/iov_iter.c"
}
},
{
"digest": {
"length": 833.0,
"function_hash": "290078264676336407480132996656937638793"
},
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"id": "CVE-2017-5550-48fc6dd4",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@b9dc6f65bc5e232d1c05fe34b5daadc7e8bbf1fb",
"target": {
"file": "lib/iov_iter.c",
"function": "pipe_advance"
}
},
{
"digest": {
"length": 296.0,
"function_hash": "142199063225609485953952351995408782970"
},
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"id": "CVE-2017-5550-9cc6e01b",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@b9dc6f65bc5e232d1c05fe34b5daadc7e8bbf1fb",
"target": {
"file": "lib/iov_iter.c",
"function": "iov_iter_pipe"
}
}
]
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-5550.json"
[
{
"digest": {
"length": 833.0,
"function_hash": "290078264676336407480132996656937638793"
},
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"id": "CVE-2017-5550-25de66e8",
"source": "https://github.com/torvalds/linux/commit/b9dc6f65bc5e232d1c05fe34b5daadc7e8bbf1fb",
"target": {
"file": "lib/iov_iter.c",
"function": "pipe_advance"
}
},
{
"digest": {
"line_hashes": [
"297997695721246534379705660160303131681",
"40343808744195651702249002087291441363",
"204321086461590859338304215731269892084",
"44343713334832012228550910425775538057",
"270446243464136826250524432337912386936",
"255379417040540974533018252258001390281",
"51571422041789275713666432454310148337",
"293876516442614475734387653228666877116",
"176541944315832830575618697281534418165",
"199909077734520217835912858764318276812",
"108704331415802027365606746178810042470",
"30674977824927076222883503021411295618",
"204142214494156336500961059725531152401",
"210770623379365366926146644589245249011",
"52260857112631406271949716075033698843",
"291208893843882585634873089879303079490",
"256635468672702379316525391243538500302",
"332245985420760904341495262317453262864",
"290137350601583991642651533172274201140",
"52588158917067304110886597145611045048",
"177854910309745016587063749170879980373",
"43567700291938661204447441027177362138",
"105588719227677011370856154684012965442",
"282146234854327648499574282324457509846",
"334536785202219119567760456111677878641",
"335516310016971746305045929753743413551",
"216429129836573788257682481657015472507",
"322569882250435207699311410302666416453",
"274171869554745901257960499783775726361",
"281078893681408575827586009904707497554",
"163563533856046461902027339289584445821",
"176045888787007200383267221620941107643",
"42923703080139950559174484145217494445",
"202222755583746811844065823796906073175",
"115522868564724831031275273006618853653",
"326395509076236888114044550516673957837",
"179063126790026211379425705637487659478",
"9343033378790229573115724776497783950",
"269456077029181725505560922893823087521",
"225366560384155702678029583716936251700",
"226583755473542292929514505021413011762"
],
"threshold": 0.9
},
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"id": "CVE-2017-5550-3329e443",
"source": "https://github.com/torvalds/linux/commit/b9dc6f65bc5e232d1c05fe34b5daadc7e8bbf1fb",
"target": {
"file": "lib/iov_iter.c"
}
},
{
"digest": {
"length": 296.0,
"function_hash": "142199063225609485953952351995408782970"
},
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"id": "CVE-2017-5550-a312a69b",
"source": "https://github.com/torvalds/linux/commit/b9dc6f65bc5e232d1c05fe34b5daadc7e8bbf1fb",
"target": {
"file": "lib/iov_iter.c",
"function": "iov_iter_pipe"
}
}
]
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-5550.json"