CVE-2017-8831

The saa7164_bus_get function in drivers/media/pci/saa7164/saa7164-bus.c in the Linux kernel through 4.11.5 allows local users to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact by changing a certain sequence-number value, aka a "double fetch" vulnerability.

• CWE-125

• http://www.securityfocus.com/archive/1/540770/30/0/threadedThird Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/99619Third Party Advisory, VDB Entry
• https://bugzilla.kernel.org/show_bug.cgi?id=195559Issue Tracking
• https://github.com/stoth68000/media-tree/commit/354dd3924a2e43806774953de536257548b5002cPatch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2017/12/msg00004.htmlMailing List, Third Party Advisory
• https://usn.ubuntu.com/3754-1/Third Party Advisory
• http://www.securityfocus.com/archive/1/540770/30/0/threadedThird Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/99619Third Party Advisory, VDB Entry
• https://bugzilla.kernel.org/show_bug.cgi?id=195559Issue Tracking
• https://github.com/stoth68000/media-tree/commit/354dd3924a2e43806774953de536257548b5002cPatch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2017/12/msg00004.htmlMailing List, Third Party Advisory
• https://usn.ubuntu.com/3754-1/Third Party Advisory

Published

May 8, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-8824The dccp_disconnect function in net/dccp/proto.c in the Linu…7.8
• CVE-2017-8825A null dereference vulnerability has been found in the MIME …
• CVE-2017-8826FastStone Image Viewer 6.2 has a "User Mode Write AV" issue,…
• CVE-2017-8827forgotpassword.php in GeniXCMS 1.0.2 lacks a rate limit, whi…
• CVE-2017-8829Deserialization vulnerability in lintian through 2.5.50.3 al…
• CVE-2017-8830In ImageMagick 7.0.5-6, the ReadBMPImage function in bmp.c:1…
• CVE-2017-8832Allen Disk 1.6 has XSS in the id parameter to downfile.php.
• CVE-2017-8833Zen Cart 1.6.0 has XSS in the main_page parameter to index.p…
• CVE-2017-8834The cr_tknzr_parse_comment function in cr-tknzr.c in libcroc…6.5
• CVE-2017-8835SQL injection exists on Peplink Balance 305, 380, 580, 710, …
• CVE-2017-8836CSRF exists on Peplink Balance 305, 380, 580, 710, 1350, and…
• CVE-2017-8837Cleartext password storage exists on Peplink Balance 305, 38…