CVE-2017-12762

Name: CVE-2017-12762
Creator: NVD / NIST
Published: 2017-08-09T21:29:01.507+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

CRITICALCVSS 9.8/10EPSS 5.23%

Last modified Jun 17, 2026

CVE-2017-12762 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. In /drivers/isdn/i4l/isdn_net.c: A user-controlled buffer is copied into a local buffer of constant size using strcpy without a length check which can cause a buffer overflow. This affects the Linux kernel 4.9-stable tree, 4.12-stable tree, 3.18-stable tree, and 4.4-stable tree.. EPSS estimates a 5.23% chance of exploitation in the next 30 days.

Description

In /drivers/isdn/i4l/isdn_net.c: A user-controlled buffer is copied into a local buffer of constant size using strcpy without a length check which can cause a buffer overflow. This affects the Linux kernel 4.9-stable tree, 4.12-stable tree, 3.18-stable tree, and 4.4-stable tree.

Metrics

CVSS 3.1

9.8/10

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Probability

5.23%

91.5th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-119

Affected Software

Vendor	Product	Versions
Linux	Linux Kernel	>= 3.18, < 3.18.64
Linux	Linux Kernel	>= 3.19, <= 4.4.80
Linux	Linux Kernel	>= 4.5, <= 4.9.41
Linux	Linux Kernel	>= 4.10, <= 4.12.5
Canonical	Ubuntu Linux	12.04
Canonical	Ubuntu Linux	14.04

References

http://www.openwall.com/lists/oss-security/2020/02/11/1Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2020/02/11/2Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2020/02/14/4Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/100251Third Party Advisory, VDB Entry
https://patchwork.kernel.org/patch/9880041/Patch, Vendor Advisory
https://usn.ubuntu.com/3620-1/Third Party Advisory
https://usn.ubuntu.com/3620-2/Third Party Advisory
http://www.openwall.com/lists/oss-security/2020/02/11/1Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2020/02/11/2Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2020/02/14/4Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/100251Third Party Advisory, VDB Entry
https://patchwork.kernel.org/patch/9880041/Patch, Vendor Advisory
https://usn.ubuntu.com/3620-1/Third Party Advisory
https://usn.ubuntu.com/3620-2/Third Party Advisory

Timeline

Published: Aug 9, 2017
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2017-12762?

How severe is CVE-2017-12762?

CVE-2017-12762 has a CVSS score of 9.8/10 (CRITICAL severity). The EPSS model estimates a 5.23% probability of exploitation in the next 30 days.

How do I fix CVE-2017-12762?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2017

View all 2017CVEs →

Are you affected by CVE-2017-12762?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST