PT-2015-3358 · Linux+1 · Linux Kernel+1

Farazpajohan + 1 · Publicado 2015-06-03 · Atualizado 2020-07-31 · CVE-2017-5972

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions 3.x

Description The TCP stack in the Linux kernel does not properly implement a SYN cookie protection mechanism for the case of a fast network connection, which allows remote attackers to cause a denial of service (CPU consumption) by sending many TCP SYN packets. This issue can be exploited by sending specially crafted SYN packets, leading to CPU consumption.

Recommendations For Linux kernel version 3.x, consider implementing a workaround to limit the impact of SYN packet attacks, such as configuring the system to drop SYN packets after a certain threshold. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Resource Exhaustion

Enumeração de Fraquezas

CWE-400

CWE-399

Identificadores relacionados

ALT-PU-2015-1485

ALT-PU-2015-1849

BDU:2018-00380

CVE-2017-5972

Produtos afetados

Alt Linux

Linux Kernel

Referências · 20

• 🔥 https://cxsecurity.com/issue/WLB-2017020112 · Exploit
• 🔥 https://exploit-db.com/exploits/41350 · Exploit
• 🔥 https://packetstormsecurity.com/files/141083/CentOS7-Kernel-Denial-Of-Service.html · Exploit
• https://bdu.fstec.ru/vul/2018-00380 · Nota de Segurança
• https://bugzilla.redhat.com/show_bug.cgi?id=1422081 · Nota
• https://cve.org/CVERecord?id=CVE-2017-5972 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5972 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-5972 · Nota de Segurança
• https://ubuntu.com/security/CVE-2017-5972 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-5972 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2017-5972 · Aviso do Fabricante
• http://seclists.org/oss-sec/2017/q1/573 · Nota
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=e994b2f0fb9229aeff5eea9541320bd7b2ca8714 · Nota
• https://access.redhat.com/security/cve/cve-2017-5972 · Nota
• http://wiki.rosalab.ru/ru/index.php/ROSA-SA-18-04-04.001 · Nota