PT-2017-10960 · Linux+5 · Linux Kernel+5

Published 2017-12-11 · Updated 2019-05-28 · CVE-2017-1000407

Positive Technologies (AI Summary)

CVSS v3.1

7.4

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.32 and later

Description The issue allows for a denial of service by flooding the diagnostic port 0x80, which can trigger an exception leading to a kernel panic.

Recommendations For Linux Kernel versions 2.6.32 and later, consider restricting access to the diagnostic port 0x80 to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Improper Check for Exceptional Conditions

Weakness Enumeration

CWE-754

Related Identifiers

ALT-PU-2017-2802

ALT-PU-2017-2803

ALT-PU-2017-2808

ALT-PU-2018-1557

ALT-PU-2019-1433

CESA-2018_1062

CVE-2017-1000407

DLA-1200-1

DSA-4073-1

DSA-4082-1

MGASA-2018-0062

MGASA-2018-0063

MGASA-2018-0064

MGASA-2018-0073

MGASA-2018-0074

MGASA-2018-0075

RHSA-2018:0676

RHSA-2018:1062

RHSA-2018_0676

RHSA-2018_1062

RHSA-2019:1170

SUSE-SU-2018:3746-1

SUSE-SU-2018:3869-1

SUSE-SU-2018_3746-1

SUSE-SU-2019:1289-1

SUSE-SU-2019:13937-1

SUSE-SU-2019_13937-1

USN-3583-1

USN-3583-2

USN-3617-1

USN-3617-2

USN-3619-1

USN-3619-2

USN-3632-1

Affected Products

Alt Linux

Centos

Linux Kernel

Red Hat

Suse

Ubuntu

References · 264

• https://usn.ubuntu.com/3617-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-12190 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-1000407 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-4073-1 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2018-0075 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-12153 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-1000026 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-15274 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-16536 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3619-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3619-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-0861 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-17448 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-7889 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-17449 · Vendor Advisory