PT-2017-2223 · Linux+5 · Linux Kernel+5

Andrey Konovalov

·

Publicado

2017-05-19

·

Atualizado

2023-02-24

·

CVE-2017-9075

CVSS v3.1

7.8

Alta

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.11.1
Description The issue is related to the sctp v6 create accept sk function in net/sctp/ipv6.c, which mishandles inheritance. This allows local users to cause a denial of service or possibly have other unspecified impacts via crafted system calls.
Recommendations For Linux kernel versions prior to 4.11.1, update to version 4.11.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the sctp v6 create accept sk function to minimize the risk of exploitation.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-19

Identificadores relacionados

ALT-PU-2017-1699
ALT-PU-2017-1808
ALT-PU-2017-1854
BDU:2017-01416
CESA-2017_1842
CESA-2018_1854
CVE-2017-9075
DLA-993-1
DSA-3886-1
MGASA-2017-0186
MGASA-2017-0187
MGASA-2017-0188
OPENSUSE-SU-2017_1513-1
RHSA-2017:1842
RHSA-2017:2077
RHSA-2017:2669
RHSA-2017_1842
RHSA-2017_2077
RHSA-2018:1854
RHSA-2018_1854
SUSE-SU-2017:1853-1
SUSE-SU-2017:1990-1
SUSE-SU-2017:2342-1
SUSE-SU-2017:2389-1
SUSE-SU-2017:2525-1
SUSE-SU-2017:2908-1
SUSE-SU-2017:2920-1
USN-3342-1
USN-3342-2
USN-3343-1
USN-3343-2
USN-3344-1
USN-3344-2
USN-3345-1

Produtos afetados

Alt Linux
Centos
Linux Kernel
Red Hat
Suse
Ubuntu