Memory Corruption Vulnerability in Linux Kernel Affects Kerberos 5 Ticket Processing

CVE-2017-7482

What is CVE-2017-7482?

In the Linux kernel prior to version 4.12, an issue was identified in the decoding of Kerberos 5 tickets when utilizing the RXRPC keys. The vulnerability arises from an incorrect assumption regarding the size of a field, leading to a potential wrap-around of the size-remaining variable. This flaw may result in the data pointer exceeding the bounds of the buffer and impairing memory integrity, which could facilitate unauthorized privilege escalation.

References