CVE-2017-16911

The vhci_hcd driver in the Linux Kernel before version 4.14.8 and 4.4.114 allows allows local attackers to disclose kernel memory addresses. Successful exploitation requires that a USB device is attached over IP.

• CWE-200

• http://www.securityfocus.com/bid/102156Third Party Advisory, VDB Entry
• https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.8Issue Tracking
• https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.114Issue Tracking
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git/commit/drivers/usb/usbip?id=2f2d0088eb93db5c649d2a5e34a3800a8a935fc5Patch, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html
• https://secuniaresearch.flexerasoftware.com/advisories/80454/Third Party Advisory
• https://secuniaresearch.flexerasoftware.com/secunia_research/2017-20/Third Party Advisory
• https://usn.ubuntu.com/3619-1/
• https://usn.ubuntu.com/3619-2/
• https://usn.ubuntu.com/3754-1/
• https://www.debian.org/security/2018/dsa-4187
• https://www.spinics.net/lists/linux-usb/msg163480.htmlIssue Tracking, Mailing List
• http://www.securityfocus.com/bid/102156Third Party Advisory, VDB Entry
• https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.8Issue Tracking
• https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.114Issue Tracking
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git/commit/drivers/usb/usbip?id=2f2d0088eb93db5c649d2a5e34a3800a8a935fc5Patch, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html
• https://secuniaresearch.flexerasoftware.com/advisories/80454/Third Party Advisory
• https://secuniaresearch.flexerasoftware.com/secunia_research/2017-20/Third Party Advisory
• https://usn.ubuntu.com/3619-1/
• https://usn.ubuntu.com/3619-2/
• https://usn.ubuntu.com/3754-1/
• https://www.debian.org/security/2018/dsa-4187
• https://www.spinics.net/lists/linux-usb/msg163480.htmlIssue Tracking, Mailing List

Published

Jan 31, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-16906In Horde Groupware 5.2.19-5.2.22, there is XSS via the URL f…
• CVE-2017-16907In Horde Groupware 5.2.19 and 5.2.21, there is XSS via the C…
• CVE-2017-16908In Horde Groupware 5.2.19, there is XSS via the Name field d…
• CVE-2017-16909An error related to the "LibRaw::panasonic_load_raw()" funct…
• CVE-2017-1691IBM Rational Quality Manager and IBM Rational Collaborative …5.4
• CVE-2017-16910An error within the "LibRaw::xtrans_interpolate()" function …
• CVE-2017-16912The "get_pipe()" function (drivers/usb/usbip/stub_rx.c) in t…
• CVE-2017-16913The "stub_recv_cmd_submit()" function (drivers/usb/usbip/stu…
• CVE-2017-16914The "stub_send_ret_submit()" function (drivers/usb/usbip/stu…
• CVE-2017-16919MapOS 3.1.11 and earlier has a Stored Cross-site Scripting (…
• CVE-2017-1692IBM AIX 5.3, 6.1, 7.1, and 7.2 contains an unspecified vulne…
• CVE-2017-16920v5/config/system.php in dayrui FineCms 5.2.0 has a default S…