PT-2017-17707 · Blackbox · Backbox Linux

Hosein Askari · Publicado 2017-04-03 · Atualizado 2024-08-05 · CVE-2017-7397

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions BackBox Linux version 4.6

Description The issue allows remote attackers to cause a denial of service, specifically ksoftirqd CPU consumption, via a flood of packets with Martian source IP addresses, as defined in RFC 1812 section 5.3.7. This product enables net.ipv4.conf.all.log martians by default. However, the vendor reports that this vulnerability has no foundation and is totally fake and based on false assumptions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Resource Exhaustion

Enumeração de Fraquezas

CWE-400

Identificadores relacionados

CVE-2017-7397

Produtos afetados

Backbox Linux

Referências · 8

• 🔥 https://exploit-db.com/exploits/41781 · Exploit
• 🔥 https://cxsecurity.com/issue/WLB-2017040001 · Exploit
• 🔥 http://exploitalert.com/view-details.html?id=26361 · Exploit
• https://backbox.org/portal/blog/false-cve-backbox-46-unmasked · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-7397 · Nota de Segurança
• https://forum.backbox.org/security-advisories/waiting-verification-backbox-os-denial-of-service/msg10218 · Aviso do Fabricante
• https://t.me/cvenotify/89222 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2017-7397 · Aviso do Fabricante