Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Benjamin Poirier

#32641of 53,635
7.8Total CVSS
Vulnerabilities · 1
PT-2017-2968
7.8
2017-08-29
Linux · Linux Kernel · CVE-2017-14497
**Name of the Vulnerable Software and Affected Versions** Linux kernel versions prior to 4.13 **Description** The issue is related to the tpacket rcv function in the Linux kernel, which mishandles vnet headers. This might allow local users to cause a denial of service, including buffer overflow, and disk and memory corruption, or possibly have other unspecified impacts via crafted system calls. **Recommendations** For Linux kernel versions prior to 4.13, update to version 4.13 or later to resolve the issue. As a temporary workaround, consider restricting access to the tpacket rcv function to minimize the risk of exploitation.