PT-2017-2617 · Linux+3 · Linux Kernel+3
李强
·
Publicado
2017-05-02
·
Atualizado
2023-02-14
·
CVE-2017-7487
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions through 4.11.1
Description
The issue is related to the
ipxitf ioctl function in the Linux kernel, which mishandles reference counts. This can be exploited by local users to cause a denial of service (use-after-free) or possibly have other unspecified impacts via a failed SIOCGIFADDR ioctl call for an IPX interface.Recommendations
For Linux kernel versions through 4.11.1, update to a version later than 4.11.1 to resolve the issue. As a temporary workaround, consider restricting access to the
ipxitf ioctl function to minimize the risk of exploitation.Correção
DoS
Use After Free
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Linux Kernel
Suse
Ubuntu