Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Benjamin Poirier

#32364de 53,638
7.8CVSS total
Vulnerabilidades · 1
PT-2017-2968
7.8
2017-08-29
Linux · Linux Kernel · CVE-2017-14497
**Name of the Vulnerable Software and Affected Versions** Linux kernel versions prior to 4.13 **Description** The issue is related to the tpacket rcv function in the Linux kernel, which mishandles vnet headers. This might allow local users to cause a denial of service, including buffer overflow, and disk and memory corruption, or possibly have other unspecified impacts via crafted system calls. **Recommendations** For Linux kernel versions prior to 4.13, update to version 4.13 or later to resolve the issue. As a temporary workaround, consider restricting access to the tpacket rcv function to minimize the risk of exploitation.