PT-2017-2224 · Linux+5 · Linux Kernel+5

Andrey Konovalov

·

Publicado

2017-05-19

·

Atualizado

2023-02-24

·

CVE-2017-9074

CVSS v3.1

7.8

Alta

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.11.1
Description The issue is related to the implementation of IPv6 packet fragmentation in the Linux kernel, which does not properly handle an invalid option associated with the nexthdr field. This can be exploited by a local attacker to cause a denial of service, potentially leading to an out-of-bounds read or other unspecified impacts, by using crafted socket and send system calls.
Recommendations For Linux kernel versions prior to 4.11.1, update to version 4.11.1 or later to resolve the issue.

Correção

DoS

Out of bounds Read

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

ALT-PU-2017-1699
ALT-PU-2017-1808
ALT-PU-2017-1854
BDU:2017-01417
CESA-2017_1842
CVE-2017-9074
DLA-993-1
DSA-3886-1
MGASA-2017-0186
MGASA-2017-0187
MGASA-2017-0188
OPENSUSE-SU-2017_1513-1
RHSA-2017:1842
RHSA-2017:2077
RHSA-2017:2669
RHSA-2017_1842
RHSA-2017_2077
RHSA-2018:0169
RHSA-2018_0169
SUSE-SU-2017:1853-1
SUSE-SU-2017:1990-1
SUSE-SU-2017:2342-1
SUSE-SU-2017:2389-1
SUSE-SU-2017:2525-1
SUSE-SU-2017:2908-1
SUSE-SU-2017:2920-1
USN-3342-1
USN-3342-2
USN-3343-1
USN-3343-2
USN-3344-1
USN-3344-2
USN-3345-1
USN-3360-2

Produtos afetados

Alt Linux
Centos
Linux Kernel
Red Hat
Suse
Ubuntu