CVE-2017-16912

The "get_pipe()" function (drivers/usb/usbip/stub_rx.c) in the Linux Kernel before version 4.14.8, 4.9.71, and 4.4.114 allows attackers to cause a denial of service (out-of-bounds read) via a specially crafted USB over IP packet.

• CWE-125

• http://www.securityfocus.com/bid/102150Third Party Advisory, VDB Entry
• https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.8Issue Tracking
• https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.114Issue Tracking
• https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.71Issue Tracking
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git/commit/drivers/usb/usbip?id=635f545a7e8be7596b9b2b6a43cab6bbd5a88e43Issue Tracking, Patch, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html
• https://secuniaresearch.flexerasoftware.com/advisories/77000/Third Party Advisory
• https://secuniaresearch.flexerasoftware.com/secunia_research/2017-21/Third Party Advisory
• https://usn.ubuntu.com/3619-1/
• https://usn.ubuntu.com/3619-2/
• https://usn.ubuntu.com/3754-1/
• https://www.debian.org/security/2018/dsa-4187
• https://www.spinics.net/lists/linux-usb/msg163480.htmlIssue Tracking, Third Party Advisory
• http://www.securityfocus.com/bid/102150Third Party Advisory, VDB Entry
• https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.8Issue Tracking
• https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.114Issue Tracking
• https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.71Issue Tracking
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git/commit/drivers/usb/usbip?id=635f545a7e8be7596b9b2b6a43cab6bbd5a88e43Issue Tracking, Patch, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html
• https://secuniaresearch.flexerasoftware.com/advisories/77000/Third Party Advisory
• https://secuniaresearch.flexerasoftware.com/secunia_research/2017-21/Third Party Advisory
• https://usn.ubuntu.com/3619-1/
• https://usn.ubuntu.com/3619-2/
• https://usn.ubuntu.com/3754-1/
• https://www.debian.org/security/2018/dsa-4187
• https://www.spinics.net/lists/linux-usb/msg163480.htmlIssue Tracking, Third Party Advisory

Published

Jan 31, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-16907In Horde Groupware 5.2.19 and 5.2.21, there is XSS via the C…
• CVE-2017-16908In Horde Groupware 5.2.19, there is XSS via the Name field d…
• CVE-2017-16909An error related to the "LibRaw::panasonic_load_raw()" funct…
• CVE-2017-1691IBM Rational Quality Manager and IBM Rational Collaborative …5.4
• CVE-2017-16910An error within the "LibRaw::xtrans_interpolate()" function …
• CVE-2017-16911The vhci_hcd driver in the Linux Kernel before version 4.14.…
• CVE-2017-16913The "stub_recv_cmd_submit()" function (drivers/usb/usbip/stu…
• CVE-2017-16914The "stub_send_ret_submit()" function (drivers/usb/usbip/stu…
• CVE-2017-16919MapOS 3.1.11 and earlier has a Stored Cross-site Scripting (…
• CVE-2017-1692IBM AIX 5.3, 6.1, 7.1, and 7.2 contains an unspecified vulne…
• CVE-2017-16920v5/config/system.php in dayrui FineCms 5.2.0 has a default S…
• CVE-2017-16921In OTRS 6.0.x up to and including 6.0.1, OTRS 5.0.x up to an…