PT-2017-17707 · Blackbox · Backbox Linux

Hosein Askari · Published 2017-04-03 · Updated 2024-08-05 · CVE-2017-7397

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions BackBox Linux version 4.6

Description The issue allows remote attackers to cause a denial of service, specifically ksoftirqd CPU consumption, via a flood of packets with Martian source IP addresses, as defined in RFC 1812 section 5.3.7. This product enables net.ipv4.conf.all.log martians by default. However, the vendor reports that this vulnerability has no foundation and is totally fake and based on false assumptions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2017-7397

Affected Products

Backbox Linux

References · 8

• 🔥 https://exploit-db.com/exploits/41781 · Exploit
• 🔥 https://cxsecurity.com/issue/WLB-2017040001 · Exploit
• 🔥 http://exploitalert.com/view-details.html?id=26361 · Exploit
• https://backbox.org/portal/blog/false-cve-backbox-46-unmasked · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-7397 · Security Note
• https://forum.backbox.org/security-advisories/waiting-verification-backbox-os-denial-of-service/msg10218 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-7397 · Vendor Advisory
• https://t.me/cvenotify/89222 · Telegram Post