PT-2017-3308 · Linux+3 · Linux Kernel+3

Chunyu Wang · Published 2017-10-19 · Updated 2023-01-19 · CVE-2017-15115

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.14

Description The issue is related to the sctp do peeloff function in the Linux kernel, which does not properly check the intended netns during a peel-off action. This can lead to a denial of service, causing a system crash due to a use-after-free error. Local users can exploit this by making crafted system calls, potentially resulting in unspecified other impacts.

Recommendations For Linux kernel versions prior to 4.14, update to version 4.14 or later to resolve the issue. As a temporary workaround, consider restricting access to the sctp do peeloff function to minimize the risk of exploitation.

Fix

DoS

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALT-PU-2017-2696

ALT-PU-2017-2697

BDU:2018-00073

CVE-2017-15115

DLA-1200-1

MGASA-2017-0463

MGASA-2017-0466

MGASA-2017-0467

MGASA-2018-0062

MGASA-2018-0063

MGASA-2018-0064

OPENSUSE-SU-2017_3358-1

OPENSUSE-SU-2017_3359-1

SUSE-SU-2017:3398-1

SUSE-SU-2017:3410-1

SUSE-SU-2018:0011-1

SUSE-SU-2018:0031-1

SUSE-SU-2018:0040-1

SUSE-SU-2018:0115-1

SUSE-SU-2018:0180-1

SUSE-SU-2018:0213-1

USN-3581-1

USN-3581-2

USN-3581-3

USN-3582-1

USN-3582-2

USN-3583-1

USN-3583-2

Affected Products

Alt Linux

Linux Kernel

Suse

Ubuntu

References · 436

• https://github.com/torvalds/linux/commit/df80cd9b28b9ebaa284a41df611dbf3a2d05ca74 · Patch
• https://usn.ubuntu.com/3581-3 · Vendor Advisory
• https://usn.ubuntu.com/3581-1 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2017-0467 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3582-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-14156 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2017-0466 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-15274 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-7889 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-15115 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1513345 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2018:0011-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3583-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-17712 · Vendor Advisory
• https://patchwork.ozlabs.org/patch/827077 · Patch