{"history":[{"alert":0,"cve":"CVE-2017-16995","id":21614,"kind":"epss","observed_at":1794500401,"payload":"{\"date\": \"2026-11-12\", \"epss\": 0.30052, \"percentile\": 0.98236}"},{"alert":0,"cve":"CVE-2017-16995","id":21272,"kind":"epss","observed_at":1794478802,"payload":"{\"date\": \"2026-11-10\", \"epss\": 0.30052, \"percentile\": 0.98224}"},{"alert":1,"cve":"CVE-2017-16995","id":21268,"kind":"cna","observed_at":1794478802,"payload":"{\"containers\": {\"adp\": [{\"providerMetadata\": {\"dateUpdated\": \"2024-08-05T20:43:57.863Z\", \"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\"}, \"references\": [{\"name\": \"45058\", \"tags\": [\"exploit\", \"x_refsource_EXPLOIT-DB\", \"x_transferred\"], \"url\": \"https://www.exploit-db.com/exploits/45058/\"}, {\"tags\": [\"x_refsource_MISC\", \"x_transferred\"], \"url\": \"https://github.com/torvalds/linux/commit/95a762e2c8c942780948091f8f2a4f32fce1ac6f\"}, {\"name\": \"USN-3619-2\", \"tags\": [\"vendor-advisory\", \"x_refsource_UBUNTU\", \"x_transferred\"], \"url\": \"https://usn.ubuntu.com/3619-2/\"}, {\"tags\": [\"x_refsource_MISC\", \"x_transferred\"], \"url\": \"https://bugs.chromium.org/p/project-zero/issues/detail?id=1454\"}, {\"name\": \"USN-3633-1\", \"tags\": [\"vendor-advisory\", \"x_refsource_UBUNTU\", \"x_transferred\"], \"url\": \"https://usn.ubuntu.com/3633-1/\"}, {\"name\": \"102288\", \"tags\": [\"vdb-entry\", \"x_refsource_BID\", \"x_transferred\"], \"url\": \"http://www.securityfocus.com/bid/102288\"}, {\"name\": \"44298\", \"tags\": [\"exploit\", \"x_refsource_EXPLOIT-DB\", \"x_transferred\"], \"url\": \"https://www.exploit-db.com/exploits/44298/\"}, {\"name\": \"45010\", \"tags\": [\"exploit\", \"x_refsource_EXPLOIT-DB\", \"x_transferred\"], \"url\": \"https://www.exploit-db.com/exploits/45010/\"}, {\"name\": \"DSA-4073\", \"tags\": [\"vendor-advisory\", \"x_refsource_DEBIAN\", \"x_transferred\"], \"url\": \"https://www.debian.org/security/2017/dsa-4073\"}, {\"name\": \"USN-3523-2\", \"tags\": [\"vendor-advisory\", \"x_refsource_UBUNTU\", \"x_transferred\"], \"url\": \"https://usn.ubuntu.com/usn/usn-3523-2/\"}, {\"tags\": [\"x_refsource_MISC\", \"x_transferred\"], \"url\": \"http://openwall.com/lists/oss-security/2017/12/21/2\"}, {\"name\": \"USN-3619-1\", \"tags\": [\"vendor-advisory\", \"x_refsource_UBUNTU\", \"x_transferred\"], \"url\": \"https://usn.ubuntu.com/3619-1/\"}, {\"tags\": [\"x_refsource_MISC\", \"x_transferred\"], \"url\": \"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=95a762e2c8c942780948091f8f2a4f32fce1ac6f\"}, {\"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"], \"url\": \"https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=a6132276ab5dcc38b3299082efeb25b948263adb\"}], \"title\": \"CVE Program Container\"}], \"cna\": {\"affected\": [{\"product\": \"n/a\", \"vendor\": \"n/a\", \"versions\": [{\"status\": \"affected\", \"version\": \"through 4.4\"}]}], \"datePublic\": \"2017-12-22T00:00:00.000Z\", \"descriptions\": [{\"lang\": \"en\", \"value\": \"The check_alu_op function in kernel/bpf/verifier.c in the Linux kernel through 4.4 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging incorrect sign extension.\"}], \"problemTypes\": [{\"descriptions\": [{\"description\": \"incorrect sign extension\", \"lang\": \"en\", \"type\": \"text\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2021-01-05T19:59:46.000Z\", \"orgId\": \"79363d38-fa19-49d1-9214-5f28da3f3ac5\", \"shortName\": \"debian\"}, \"references\": [{\"name\": \"45058\", \"tags\": [\"exploit\", \"x_refsource_EXPLOIT-DB\"], \"url\": \"https://www.exploit-db.com/exploits/45058/\"}, {\"tags\": [\"x_refsource_MISC\"], \"url\": \"https://github.com/torvalds/linux/commit/95a762e2c8c942780948091f8f2a4f32fce1ac6f\"}, {\"name\": \"USN-3619-2\", \"tags\": [\"vendor-advisory\", \"x_refsource_UBUNTU\"], \"url\": \"https://usn.ubuntu.com/3619-2/\"}, {\"tags\": [\"x_refsource_MISC\"], \"url\": \"https://bugs.chromium.org/p/project-zero/issues/detail?id=1454\"}, {\"name\": \"USN-3633-1\", \"tags\": [\"vendor-advisory\", \"x_refsource_UBUNTU\"], \"url\": \"https://usn.ubuntu.com/3633-1/\"}, {\"name\": \"102288\", \"tags\": [\"vdb-entry\", \"x_refsource_BID\"], \"url\": \"http://www.securityfocus.com/bid/102288\"}, {\"name\": \"44298\", \"tags\": [\"exploit\", \"x_refsource_EXPLOIT-DB\"], \"url\": \"https://www.exploit-db.com/exploits/44298/\"}, {\"name\": \"45010\", \"tags\": [\"exploit\", \"x_refsource_EXPLOIT-DB\"], \"url\": \"https://www.exploit-db.com/exploits/45010/\"}, {\"name\": \"DSA-4073\", \"tags\": [\"vendor-advisory\", \"x_refsource_DEBIAN\"], \"url\": \"https://www.debian.org/security/2017/dsa-4073\"}, {\"name\": \"USN-3523-2\", \"tags\": [\"vendor-advisory\", \"x_refsource_UBUNTU\"], \"url\": \"https://usn.ubuntu.com/usn/usn-3523-2/\"}, {\"tags\": [\"x_refsource_MISC\"], \"url\": \"http://openwall.com/lists/oss-security/2017/12/21/2\"}, {\"name\": \"USN-3619-1\", \"tags\": [\"vendor-advisory\", \"x_refsource_UBUNTU\"], \"url\": \"https://usn.ubuntu.com/3619-1/\"}, {\"tags\": [\"x_refsource_MISC\"], \"url\": \"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=95a762e2c8c942780948091f8f2a4f32fce1ac6f\"}, {\"tags\": [\"x_refsource_CONFIRM\"], \"url\": \"https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=a6132276ab5dcc38b3299082efeb25b948263adb\"}], \"x_legacyV4Record\": {\"CVE_data_meta\": {\"ASSIGNER\": \"security@debian.org\", \"ID\": \"CVE-2017-16995\", \"STATE\": \"PUBLIC\"}, \"affects\": {\"vendor\": {\"vendor_data\": [{\"product\": {\"product_data\": [{\"product_name\": \"n/a\", \"version\": {\"version_data\": [{\"version_value\": \"through 4.4\"}]}}]}, \"vendor_name\": \"n/a\"}]}}, \"data_format\": \"MITRE\", \"data_type\": \"CVE\", \"data_version\": \"4.0\", \"description\": {\"description_data\": [{\"lang\": \"eng\", \"value\": \"The check_alu_op function in kernel/bpf/verifier.c in the Linux kernel through 4.4 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging incorrect sign extension.\"}]}, \"problemtype\": {\"problemtype_data\": [{\"description\": [{\"lang\": \"eng\", \"value\": \"incorrect sign extension\"}]}]}, \"references\": {\"reference_data\": [{\"name\": \"45058\", \"refsource\": \"EXPLOIT-DB\", \"url\": \"https://www.exploit-db.com/exploits/45058/\"}, {\"name\": \"https://github.com/torvalds/linux/commit/95a762e2c8c942780948091f8f2a4f32fce1ac6f\", \"refsource\": \"MISC\", \"url\": \"https://github.com/torvalds/linux/commit/95a762e2c8c942780948091f8f2a4f32fce1ac6f\"}, {\"name\": \"USN-3619-2\", \"refsource\": \"UBUNTU\", \"url\": \"https://usn.ubuntu.com/3619-2/\"}, {\"name\": \"https://bugs.chromium.org/p/project-zero/issues/detail?id=1454\", \"refsource\": \"MISC\", \"url\": \"https://bugs.chromium.org/p/project-zero/issues/detail?id=1454\"}, {\"name\": \"USN-3633-1\", \"refsource\": \"UBUNTU\", \"url\": \"https://usn.ubuntu.com/3633-1/\"}, {\"name\": \"102288\", \"refsource\": \"BID\", \"url\": \"http://www.securityfocus.com/bid/102288\"}, {\"name\": \"44298\", \"refsource\": \"EXPLOIT-DB\", \"url\": \"https://www.exploit-db.com/exploits/44298/\"}, {\"name\": \"45010\", \"refsource\": \"EXPLOIT-DB\", \"url\": \"https://www.exploit-db.com/exploits/45010/\"}, {\"name\": \"DSA-4073\", \"refsource\": \"DEBIAN\", \"url\": \"https://www.debian.org/security/2017/dsa-4073\"}, {\"name\": \"USN-3523-2\", \"refsource\": \"UBUNTU\", \"url\": \"https://usn.ubuntu.com/usn/usn-3523-2/\"}, {\"name\": \"http://openwall.com/lists/oss-security/2017/12/21/2\", \"refsource\": \"MISC\", \"url\": \"http://openwall.com/lists/oss-security/2017/12/21/2\"}, {\"name\": \"USN-3619-1\", \"refsource\": \"UBUNTU\", \"url\": \"https://usn.ubuntu.com/3619-1/\"}, {\"name\": \"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=95a762e2c8c942780948091f8f2a4f32fce1ac6f\", \"refsource\": \"MISC\", \"url\": \"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=95a762e2c8c942780948091f8f2a4f32fce1ac6f\"}, {\"name\": \"https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=a6132276ab5dcc38b3299082efeb25b948263adb\", \"refsource\": \"CONFIRM\", \"url\": \"https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=a6132276ab5dcc38b3299082efeb25b948263adb\"}]}}}}, \"cveMetadata\": {\"assignerOrgId\": \"79363d38-fa19-49d1-9214-5f28da3f3ac5\", \"assignerShortName\": \"debian\", \"cveId\": \"CVE-2017-16995\", \"datePublished\": \"2017-12-22T10:00:00.000Z\", \"dateReserved\": \"2017-11-27T00:00:00.000Z\", \"dateUpdated\": \"2024-08-05T20:43:57.863Z\", \"state\": \"PUBLISHED\"}, \"dataType\": \"CVE_RECORD\", \"dataVersion\": \"5.1\"}"}],"record":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"through 4.4"}]}],"cna":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-05T20:43:57.863Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"45058","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"],"url":"https://www.exploit-db.com/exploits/45058/"},{"tags":["x_refsource_MISC","x_transferred"],"url":"https://github.com/torvalds/linux/commit/95a762e2c8c942780948091f8f2a4f32fce1ac6f"},{"name":"USN-3619-2","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"],"url":"https://usn.ubuntu.com/3619-2/"},{"tags":["x_refsource_MISC","x_transferred"],"url":"https://bugs.chromium.org/p/project-zero/issues/detail?id=1454"},{"name":"USN-3633-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"],"url":"https://usn.ubuntu.com/3633-1/"},{"name":"102288","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/102288"},{"name":"44298","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"],"url":"https://www.exploit-db.com/exploits/44298/"},{"name":"45010","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"],"url":"https://www.exploit-db.com/exploits/45010/"},{"name":"DSA-4073","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"],"url":"https://www.debian.org/security/2017/dsa-4073"},{"name":"USN-3523-2","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"],"url":"https://usn.ubuntu.com/usn/usn-3523-2/"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://openwall.com/lists/oss-security/2017/12/21/2"},{"name":"USN-3619-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"],"url":"https://usn.ubuntu.com/3619-1/"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=95a762e2c8c942780948091f8f2a4f32fce1ac6f"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=a6132276ab5dcc38b3299082efeb25b948263adb"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"through 4.4"}]}],"datePublic":"2017-12-22T00:00:00.000Z","descriptions":[{"lang":"en","value":"The check_alu_op function in kernel/bpf/verifier.c in the Linux kernel through 4.4 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging incorrect sign extension."}],"problemTypes":[{"descriptions":[{"description":"incorrect sign extension","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2021-01-05T19:59:46.000Z","orgId":"79363d38-fa19-49d1-9214-5f28da3f3ac5","shortName":"debian"},"references":[{"name":"45058","tags":["exploit","x_refsource_EXPLOIT-DB"],"url":"https://www.exploit-db.com/exploits/45058/"},{"tags":["x_refsource_MISC"],"url":"https://github.com/torvalds/linux/commit/95a762e2c8c942780948091f8f2a4f32fce1ac6f"},{"name":"USN-3619-2","tags":["vendor-advisory","x_refsource_UBUNTU"],"url":"https://usn.ubuntu.com/3619-2/"},{"tags":["x_refsource_MISC"],"url":"https://bugs.chromium.org/p/project-zero/issues/detail?id=1454"},{"name":"USN-3633-1","tags":["vendor-advisory","x_refsource_UBUNTU"],"url":"https://usn.ubuntu.com/3633-1/"},{"name":"102288","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/102288"},{"name":"44298","tags":["exploit","x_refsource_EXPLOIT-DB"],"url":"https://www.exploit-db.com/exploits/44298/"},{"name":"45010","tags":["exploit","x_refsource_EXPLOIT-DB"],"url":"https://www.exploit-db.com/exploits/45010/"},{"name":"DSA-4073","tags":["vendor-advisory","x_refsource_DEBIAN"],"url":"https://www.debian.org/security/2017/dsa-4073"},{"name":"USN-3523-2","tags":["vendor-advisory","x_refsource_UBUNTU"],"url":"https://usn.ubuntu.com/usn/usn-3523-2/"},{"tags":["x_refsource_MISC"],"url":"http://openwall.com/lists/oss-security/2017/12/21/2"},{"name":"USN-3619-1","tags":["vendor-advisory","x_refsource_UBUNTU"],"url":"https://usn.ubuntu.com/3619-1/"},{"tags":["x_refsource_MISC"],"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=95a762e2c8c942780948091f8f2a4f32fce1ac6f"},{"tags":["x_refsource_CONFIRM"],"url":"https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=a6132276ab5dcc38b3299082efeb25b948263adb"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"security@debian.org","ID":"CVE-2017-16995","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"through 4.4"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"The check_alu_op function in kernel/bpf/verifier.c in the Linux kernel through 4.4 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging incorrect sign extension."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"incorrect sign extension"}]}]},"references":{"reference_data":[{"name":"45058","refsource":"EXPLOIT-DB","url":"https://www.exploit-db.com/exploits/45058/"},{"name":"https://github.com/torvalds/linux/commit/95a762e2c8c942780948091f8f2a4f32fce1ac6f","refsource":"MISC","url":"https://github.com/torvalds/linux/commit/95a762e2c8c942780948091f8f2a4f32fce1ac6f"},{"name":"USN-3619-2","refsource":"UBUNTU","url":"https://usn.ubuntu.com/3619-2/"},{"name":"https://bugs.chromium.org/p/project-zero/issues/detail?id=1454","refsource":"MISC","url":"https://bugs.chromium.org/p/project-zero/issues/detail?id=1454"},{"name":"USN-3633-1","refsource":"UBUNTU","url":"https://usn.ubuntu.com/3633-1/"},{"name":"102288","refsource":"BID","url":"http://www.securityfocus.com/bid/102288"},{"name":"44298","refsource":"EXPLOIT-DB","url":"https://www.exploit-db.com/exploits/44298/"},{"name":"45010","refsource":"EXPLOIT-DB","url":"https://www.exploit-db.com/exploits/45010/"},{"name":"DSA-4073","refsource":"DEBIAN","url":"https://www.debian.org/security/2017/dsa-4073"},{"name":"USN-3523-2","refsource":"UBUNTU","url":"https://usn.ubuntu.com/usn/usn-3523-2/"},{"name":"http://openwall.com/lists/oss-security/2017/12/21/2","refsource":"MISC","url":"http://openwall.com/lists/oss-security/2017/12/21/2"},{"name":"USN-3619-1","refsource":"UBUNTU","url":"https://usn.ubuntu.com/3619-1/"},{"name":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=95a762e2c8c942780948091f8f2a4f32fce1ac6f","refsource":"MISC","url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=95a762e2c8c942780948091f8f2a4f32fce1ac6f"},{"name":"https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=a6132276ab5dcc38b3299082efeb25b948263adb","refsource":"CONFIRM","url":"https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=a6132276ab5dcc38b3299082efeb25b948263adb"}]}}}},"cveMetadata":{"assignerOrgId":"79363d38-fa19-49d1-9214-5f28da3f3ac5","assignerShortName":"debian","cveId":"CVE-2017-16995","datePublished":"2017-12-22T10:00:00.000Z","dateReserved":"2017-11-27T00:00:00.000Z","dateUpdated":"2024-08-05T20:43:57.863Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"cna_checked":1794478802,"cve":"CVE-2017-16995","description":"The check_alu_op function in kernel/bpf/verifier.c in the Linux kernel through 4.4 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging incorrect sign extension.","epss":{"date":"2026-11-12","epss":0.30052,"percentile":0.98236},"epss_checked":1794522003,"first_seen":1794463287,"kev":null,"kev_checked":1794522003,"products":"n/a n/a","references":["https://www.exploit-db.com/exploits/45058/","https://github.com/torvalds/linux/commit/95a762e2c8c942780948091f8f2a4f32fce1ac6f","https://usn.ubuntu.com/3619-2/","https://bugs.chromium.org/p/project-zero/issues/detail?id=1454","https://usn.ubuntu.com/3633-1/","http://www.securityfocus.com/bid/102288","https://www.exploit-db.com/exploits/44298/","https://www.exploit-db.com/exploits/45010/","https://www.debian.org/security/2017/dsa-4073","https://usn.ubuntu.com/usn/usn-3523-2/","http://openwall.com/lists/oss-security/2017/12/21/2","https://usn.ubuntu.com/3619-1/","http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=95a762e2c8c942780948091f8f2a4f32fce1ac6f","https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=a6132276ab5dcc38b3299082efeb25b948263adb"],"score":null,"solutions":"","state":"PUBLISHED","title":"CVE-2017-16995","updated_at":1794500401,"workarounds":""},"sources":[{"canonical_url":"https://www.bleepingcomputer.com/news/security/ebpf-rootkits-why-underground-actors-are-taking-notice/","id":400,"publisher":"BleepingComputer","title":"eBPF Rootkits: Why Underground Actors Are Taking Notice"}]}