PT-2017-2222 · Linux+5 · Linux Kernel+5

Publicado

2017-05-19

·

Atualizado

2023-02-24

·

CVE-2017-9076

CVSS v3.1

7.8

Alta

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.11.1
Description The issue is related to the dccp v6 request recv sock function in the net/dccp/ipv6.c file of the Linux kernel, which mishandles inheritance. This allows local users to cause a denial of service or possibly have unspecified other impact via crafted system calls.
Recommendations For Linux kernel versions prior to 4.11.1, update to version 4.11.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the dccp v6 request recv sock function until a patch is available.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-19

Identificadores relacionados

ALT-PU-2017-1699
ALT-PU-2017-1808
ALT-PU-2017-1854
BDU:2017-01415
CESA-2017_1842
CESA-2018_1854
CVE-2017-9076
DLA-993-1
DSA-3886-1
MGASA-2017-0186
MGASA-2017-0187
MGASA-2017-0188
OPENSUSE-SU-2017_1513-1
RHSA-2017:1842
RHSA-2017:2077
RHSA-2017:2669
RHSA-2017_1842
RHSA-2017_2077
RHSA-2018:1854
RHSA-2018_1854
SUSE-SU-2017:1853-1
SUSE-SU-2017:1990-1
SUSE-SU-2017:2342-1
SUSE-SU-2017:2389-1
SUSE-SU-2017:2525-1
SUSE-SU-2017:2908-1
SUSE-SU-2017:2920-1
USN-3342-1
USN-3342-2
USN-3343-1
USN-3343-2
USN-3344-1
USN-3344-2
USN-3345-1

Produtos afetados

Alt Linux
Centos
Linux Kernel
Red Hat
Suse
Ubuntu