CVE catalog

CVE-2017-6952

capstone: CVE-2017-6952

[CVE catalog]

Severity
Low
Source
[NVD] · [CVE record]
EPSS
1.26% · Oct 25, 2026

Integer overflow in the cs_winkernel_malloc function in winkernel_mm.c in Capstone 3.0.4 and earlier allows attackers to cause a denial of service (heap-based buffer overflow in a kernel driver) or possibly have unspecified other impact via a large value.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiancapstonesid5.0.9-1not affected
Debiancapstoneforky5.0.9-1not affected
Debiancapstonetrixie5.0.7-1~deb13u1not affected
Debiancapstonebookworm4.0.2-5not affected

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
DebiancapstonesourcesidNot affectedunimportantNot reportedNot reported
DebiancapstonesourceforkyNot affectedunimportantNot reportedNot reported
DebiancapstonesourcetrixieNot affectedunimportantNot reportedNot reported
DebiancapstonesourcebookwormNot affectedunimportantNot reportedNot reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [capstone-tool]Not affected

    Source package: [capstone]

    Details (2)
    • 4.0.2-5 · amd64 · bookworm

      Not affected

      dsa · capstone · debian · bookworm

    • 4.0.2-5 · arm64 · bookworm

      Not affected

      dsa · capstone · debian · bookworm

  • [libcapstone4]Not affected

    Source package: [capstone]

    Details (2)
    • 4.0.2-5 · amd64 · bookworm

      Not affected

      dsa · capstone · debian · bookworm

    • 4.0.2-5 · arm64 · bookworm

      Not affected

      dsa · capstone · debian · bookworm

  • [libcapstone-dev]Not affected

    Source package: [capstone]

    Details (2)
    • 4.0.2-5 · amd64 · bookworm

      Not affected

      dsa · capstone · debian · bookworm

    • 4.0.2-5 · arm64 · bookworm

      Not affected

      dsa · capstone · debian · bookworm

  • [python3-capstone]Not affected

    Source package: [capstone]

    Details (2)
    • 4.0.2-5 · amd64 · bookworm

      Not affected

      dsa · capstone · debian · bookworm

    • 4.0.2-5 · arm64 · bookworm

      Not affected

      dsa · capstone · debian · bookworm

Observed:

References