PT-2017-3105 · Linux+5 · Linux Kernel+5

Published 2017-08-10 · Updated 2023-01-17 · CVE-2017-1000111

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a heap out-of-bounds condition in AF PACKET sockets, similar to a previously disclosed problem. It involves a race condition between a socket option that changes socket state and safety checks in packet set ring, specifically with PACKET RESERVE. This could potentially be exploitable, although further investigation was not conducted. The issue affects PF PACKET sockets and requires the CAP NET RAW capability in the process namespace. However, with user namespaces enabled, any process can create a namespace where it has CAP NET RAW, potentially increasing the exploitability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Weakness Enumeration

CWE-787

CWE-264

Related Identifiers

ALT-PU-2017-2047

ALT-PU-2017-2048

BDU:2017-02488

CESA-2017_2930

CESA-2017_3200

CVE-2017-1000111

DLA-1099-1

DSA-3981-1

OPENSUSE-SU-2017_2169-1

OPENSUSE-SU-2017_2171-1

RHSA-2017:2918

RHSA-2017:2930

RHSA-2017:2931

RHSA-2017:3200

RHSA-2017_2930

RHSA-2017_2931

RHSA-2017_3200

SUSE-SU-2017:2131-1

SUSE-SU-2017:2142-1

SUSE-SU-2017:2150-1

SUSE-SU-2017:2286-1

SUSE-SU-2017:2956-1

USN-3384-1

USN-3384-2

USN-3385-1

USN-3385-2

USN-3386-1

USN-3386-2

Affected Products

Alt Linux

Centos

Linux Kernel

Red Hat

Suse

Ubuntu

References · 277

• https://ubuntu.com/security/notices/USN-3385-2 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2017-1000111 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2017:2956-1 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2017:2918 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2017:2931 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-1000111 · Security Note
• https://osv.dev/vulnerability/DSA-3981-1 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2017:2930 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2017:2150-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-1000111 · Vendor Advisory
• https://osv.dev/vulnerability/USN-3385-1 · Vendor Advisory
• http://debian.org/security/2017/dsa-3981 · Vendor Advisory
• https://osv.dev/vulnerability/USN-3384-2 · Vendor Advisory
• https://osv.dev/vulnerability/USN-3386-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3386-1 · Vendor Advisory