CVE-2017-3196 PCAUSA Rawether framework does not properly validate BPF data, allowing a crafted malicious BPF program to perform operations on memory outside of its typical bounds on the driver's receipt of network...
HighCVSS 7.8
EPSS 0.70%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PCAUSA Rawether framework does not properly validate BPF data, allowing a crafted malicious BPF program to perform operations on memory outside of its typical bounds on the driver's receipt of network packets. Local attackers can exploit this issue to execute arbitrary code with SYSTEM privileges.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rawether project rawether | All versions | No fix listed |
| Printing Communications Assoc., Inc. (PCAUSA) ASUS PCE-AC56 WLAN Card Utilities | All versions | No fix listed |
References
- blog.rewolf.pl exploit third-party-advisory
- 96993 third-party-advisory vdb-entry
- www.itsecuritynews.info third-party-advisory
- VU#600671 exploit mitigation third-party-advisory us-government-resource