PT-2015-3358 · Linux+1 · Linux Kernel+1

Farazpajohan + 1 · Published 2015-06-03 · Updated 2020-07-31 · CVE-2017-5972

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions 3.x

Description The TCP stack in the Linux kernel does not properly implement a SYN cookie protection mechanism for the case of a fast network connection, which allows remote attackers to cause a denial of service (CPU consumption) by sending many TCP SYN packets. This issue can be exploited by sending specially crafted SYN packets, leading to CPU consumption.

Recommendations For Linux kernel version 3.x, consider implementing a workaround to limit the impact of SYN packet attacks, such as configuring the system to drop SYN packets after a certain threshold. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

CWE-399

Related Identifiers

ALT-PU-2015-1485

ALT-PU-2015-1849

BDU:2018-00380

CVE-2017-5972

Affected Products

Alt Linux

Linux Kernel

References · 20

• 🔥 https://cxsecurity.com/issue/WLB-2017020112 · Exploit
• 🔥 https://exploit-db.com/exploits/41350 · Exploit
• 🔥 https://packetstormsecurity.com/files/141083/CentOS7-Kernel-Denial-Of-Service.html · Exploit
• https://bdu.fstec.ru/vul/2018-00380 · Security Note
• https://cve.org/CVERecord?id=CVE-2017-5972 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2017-5972 · Security Note
• https://ubuntu.com/security/CVE-2017-5972 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-5972 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2017-5972 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-5972 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2017-5972 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1422081 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5972 · Note
• http://seclists.org/oss-sec/2017/q1/573 · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=e994b2f0fb9229aeff5eea9541320bd7b2ca8714 · Note