PT-2017-12130 · Linux+4 · Linux Kernel+4
Publicado
2017-07-24
·
Atualizado
2023-06-26
·
CVE-2017-11600
CVSS v3.1
7.0
Alta
| Vetor | AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 4.12.3
Description
The issue is related to the
net/xfrm/xfrm policy.c file in the Linux kernel. It does not properly validate the dir value of xfrm userpolicy id when CONFIG XFRM MIGRATE is enabled. This can be exploited by local users via an XFRM MSG MIGRATE xfrm Netlink message, potentially leading to a denial of service due to out-of-bounds access or other unspecified impacts.Recommendations
For Linux kernel versions prior to 4.12.3, update to version 4.12.3 or later to resolve the issue.
Correção
DoS
Out of bounds Read
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Centos
Linux Kernel
Red Hat
Suse