CWE Code: 190
Vulnerability Type: privilege_escalation
CVSS Score: 7.2
CWE Name:  Integer Overflow or Wraparound
Summary: in the linux kernel before version 4.12, kerberos 5 tickets decoded when using the rxrpc keys incorrectly assumes the size of a field. this could lead to the size-remaining variable wrapping and the data pointer going over the end of the buffer. this could possibly lead to memory corruption and possible privilege escalation.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2018-07-30
Last Modified Date: 2019-10-09