PT-2017-15011 · Linux+5 · Linux Kernel+5

Published 2017-12-20 · Updated 2023-01-19 · CVE-2017-17805

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.14.8

Description The Salsa20 encryption algorithm in the Linux kernel does not correctly handle zero-length inputs. This allows a local attacker who can use the AF ALG-based skcipher interface to cause a denial of service, resulting in an uninitialized-memory free and kernel crash, or have unspecified other impact. The issue arises from executing a crafted sequence of system calls that utilize the blkcipher walk API. Both the generic and x86 implementations of Salsa20 are affected.

Recommendations For Linux kernel versions prior to 4.14.8, update to version 4.14.8 or later to resolve the issue.

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

ALT-PU-2017-2818

ALT-PU-2017-2819

CESA-2018_3083

CESA-2019_2473

CVE-2017-17805

DLA-1232-1

DSA-4073-1

DSA-4082-1

OPENSUSE-SU-2018_0022-1

OPENSUSE-SU-2018_0023-1

RHSA-2018:2948

RHSA-2018:3083

RHSA-2018:3096

RHSA-2018_3083

RHSA-2018_3096

RHSA-2019:2473

RHSA-2019_2473

SUSE-SU-2018:0010-1

SUSE-SU-2018:0011-1

SUSE-SU-2018:0012-1

SUSE-SU-2018:0040-1

SUSE-SU-2018:0180-1

SUSE-SU-2018:0213-1

SUSE-SU-2018:0437-1

SUSE-SU-2018:0525-1

USN-3617-1

USN-3617-2

USN-3617-3

USN-3619-1

USN-3619-2

USN-3620-1

USN-3620-2

USN-3632-1

Affected Products

Alt Linux

Centos

Linux Kernel

Red Hat

Suse

Ubuntu

References · 327

• https://github.com/torvalds/linux/commit/ecaaab5649781c5a0effdaf298a925063020500e · Patch
• https://ubuntu.com/security/CVE-2017-16536 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2019:2473 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-16537 · Vendor Advisory
• https://usn.ubuntu.com/3619-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-1000026 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3620-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-17448 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3619-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-6927 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-5332 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2018:0011-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-17805 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-7492 · Vendor Advisory
• https://debian.org/security/2018/dsa-4082 · Vendor Advisory