Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Chunyu Wang

#32040de 53,638
7.8CVSS total
Vulnerabilidades · 1
PT-2017-3308
7.8
2017-10-19
Linux · Linux Kernel · CVE-2017-15115
**Name of the Vulnerable Software and Affected Versions** Linux kernel versions prior to 4.14 **Description** The issue is related to the sctp do peeloff function in the Linux kernel, which does not properly check the intended netns during a peel-off action. This can lead to a denial of service, causing a system crash due to a use-after-free error. Local users can exploit this by making crafted system calls, potentially resulting in unspecified other impacts. **Recommendations** For Linux kernel versions prior to 4.14, update to version 4.14 or later to resolve the issue. As a temporary workaround, consider restricting access to the sctp do peeloff function to minimize the risk of exploitation.