What is CVE-2017-14344?

CVE-2017-14344 is a vulnerability affecting Jungo WinDriver 12.4.0 and earlier versions. This flaw allows local attackers to escalate privileges on vulnerable installations due to a failure in properly validating user-supplied data, resulting in a kernel pool overflow. The types of systems affected are not explicitly mentioned, but it is clear that this vulnerability has a significant impact on the security of affected systems.

Who is impacted by CVE-2017-14344?

This security issue impacts users of Jungo WinDriver versions up to and including 12.5.1. The vulnerability allows local attackers to escalate their privileges on your system due to a flaw in the software's validation of user-supplied data, which can lead to a kernel pool overflow. In simpler terms, this means that an attacker could potentially gain more control over your system and execute harmful actions.

What should I do if I’m affected?

If you're affected by the CVE-2017-14344 vulnerability, it's important to take action to protect your system. Unfortunately, Jungo has not issued an update to correct this vulnerability. Update to a patched version of Jungo WinDriver software, if available. Monitor your system for any suspicious activity and report any issues to your IT administrator Stay informed about any updates or patches released by Jungo in the future.

Is this in CISA’s Known Exploited Vulnerabilities Catalog?

The CVE-2017-14344 vulnerability is not listed in CISA's Known Exploited Vulnerabilities Catalog. This high-severity issue, discovered in September 2017, affects Jungo WinDriver software versions up to 12.5.1.

Weakness Enumeration

The weakness enumeration for this vulnerability is categorized as CWE-20, which refers to improper input validation in Jungo WinDriver software.

Learn More

For a comprehensive understanding of this vulnerability, including its description, severity, technical details, and known affected software configurations, refer to the NVD page or the sources listed below.

• Source Incite Advisory

• Exploit Database Entry