PT-2017-16950 · Linux+5 · Linux Kernel+5

Dmitry Vyukov · Published 2017-02-21 · Updated 2019-10-03 · CVE-2017-6214

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.9.11

Description The issue allows remote attackers to cause a denial of service, resulting in an infinite loop and soft lockup. This can be achieved via vectors involving a TCP packet with the URG flag. The tcp splice read function in net/ipv4/tcp.c is the vulnerable component.

Recommendations For Linux kernel versions prior to 4.9.11, update to version 4.9.11 or later to resolve the issue. As a temporary workaround, consider restricting the handling of TCP packets with the URG flag to minimize the risk of exploitation.

Fix

DoS

Infinite Loop

Weakness Enumeration

CWE-835

Related Identifiers

ALT-PU-2017-1193

ALT-PU-2017-1330

CESA-2017_1372

CESA-2017_1615

CVE-2017-6214

DLA-849-1

DSA-3804-1

MGASA-2017-0063

MGASA-2017-0064

MGASA-2017-0065

OPENSUSE-SU-2017_0906-1

OPENSUSE-SU-2017_0907-1

RHSA-2017:1372

RHSA-2017:1615

RHSA-2017:1616

RHSA-2017:1647

RHSA-2017_1372

RHSA-2017_1615

RHSA-2017_1616

SUSE-SU-2017:1183-1

SUSE-SU-2017:1247-1

SUSE-SU-2017:1301-1

SUSE-SU-2017:1360-1

SUSE-SU-2017:1990-1

SUSE-SU-2017:2342-1

SUSE-SU-2017:2525-1

USN-3265-1

USN-3265-2

USN-3361-1

USN-3422-1

USN-3422-2

Affected Products

Alt Linux

Centos

Linux Kernel

Red Hat

Suse

Ubuntu

References · 712

• https://github.com/torvalds/linux/commit/ccf7abb93af09ad0868ae9033d1ca8108bdaec82 · Patch
• https://osv.dev/vulnerability/CVE-2017-6214 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3361-1 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-3804-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-5546 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3265-2 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2017-1372.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-2584 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-8650 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2017:1372 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-9755 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-2596 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-5986 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-9150 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2017-3539.html · Vendor Advisory