PT-2017-1982 · Linux+4 · Linux Kernel+4

Published 2017-04-24 · Updated 2023-06-21 · CVE-2017-7477

Positive Technologies (AI Summary)

CVSS v3.1

7.0

High

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.10.12

Description The issue is caused by a heap-based buffer overflow in the MACsec module of the Linux kernel. This can be exploited by attackers to cause a denial of service or possibly have other unspecified impacts. The vulnerability is triggered by using a size of MAX SKB FRAGS+1 in conjunction with the NETIF F FRAGLIST feature, leading to an error in the skb to sgvec function.

Recommendations For Linux kernel versions prior to 4.10.12, update to a version 4.10.12 or later to resolve the issue. As a temporary workaround, consider disabling the MACsec module until a patch is available. Restrict access to the skb to sgvec function to minimize the risk of exploitation. Avoid using the MAX SKB FRAGS+1 size in conjunction with the NETIF F FRAGLIST feature in the affected API endpoints until the issue is resolved.

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

ALT-PU-2017-1617

ALT-PU-2017-1623

BDU:2017-01146

CESA-2017_1615

CVE-2017-7477

RHSA-2017:1615

RHSA-2017:1616

RHSA-2017_1615

RHSA-2017_1616

USN-3292-1

USN-3292-2

USN-3293-1

Affected Products

Alt Linux

Centos

Linux Kernel

Red Hat

Ubuntu

References · 33

• https://git.kernel.org/pub/scm/linux/kernel/git/davem/net.git/commit/?id=4d6fa57b4dab0d77f4d8e9d9c73d1e63f6fe8fee · Patch
• https://bugzilla.redhat.com/show_bug.cgi?id=1445207 · Patch
• https://git.kernel.org/pub/scm/linux/kernel/git/davem/net.git/commit/?id=5294b83086cc1c35b4efeca03644cf9d12282e5b · Patch
• https://osv.dev/vulnerability/CVE-2017-7477 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2017:1616 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2017-7477 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3293-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2017-7477 · Vendor Advisory
• https://bdu.fstec.ru/vul/2017-01146 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2017-7477 · Security Note
• https://access.redhat.com/errata/RHSA-2017:1615 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2017-7477 · Security Note
• https://ubuntu.com/security/notices/USN-3292-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3292-2 · Vendor Advisory
• https://osv.dev/vulnerability/USN-3292-2 · Vendor Advisory