CVEvulnerability
CVE-2017-3196
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2017-12-16
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.8 HIGH — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
PCAUSA Rawether framework does not properly validate BPF data, allowing a crafted malicious BPF program to perform operations on memory outside of its typical bounds on the driver's receipt of network packets. Local attackers can exploit this issue to execute arbitrary code with SYSTEM privileges.
Affected configurations
• rawether project rawether
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://blog.rewolf.pl/blog/?p=1778 Exploit, Third Party Advisory
- http://www.securityfocus.com/bid/96993/discuss Third Party Advisory, VDB Entry
- https://www.itsecuritynews.info/vuln-printing-communications-association-rawether-cve-2017-3196-local-privilege-escalation-vulnerability/ Third Party Advisory
- https://www.kb.cert.org/vuls/id/600671 Exploit, Mitigation, Third Party Advisory, US Government Resource
- http://blog.rewolf.pl/blog/?p=1778 Exploit, Third Party Advisory
- http://www.securityfocus.com/bid/96993/discuss Third Party Advisory, VDB Entry
- https://www.itsecuritynews.info/vuln-printing-communications-association-rawether-cve-2017-3196-local-privilege-escalation-vulnerability/ Third Party Advisory
- https://www.kb.cert.org/vuls/id/600671 Exploit, Mitigation, Third Party Advisory, US Government Resource