7.8

CVE-2017-18509

Exploit
An issue was discovered in net/ipv6/ip6mr.c in the Linux kernel before 4.11. By setting a specific socket option, an attacker can control a pointer in kernel land and cause an inet_csk_listen_stop general protection fault, or potentially execute arbitrary code under certain circumstances. The issue can be triggered as root (e.g., inside a default LXC container or with the CAP_NET_ADMIN capability) or after namespace unsharing. This occurs because sk_type and protocol are not checked in the appropriate part of the ip6_mroute_* functions. NOTE: this affects Linux distributions that use 4.9.x longterm kernels before 4.9.187.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version < 3.16.72
Linux ≫ Linux Kernel Version >= 3.17 < 4.4.187
Linux ≫ Linux Kernel Version >= 4.5 < 4.9.187
Linux ≫ Linux Kernel Version >= 4.10 < 4.11
Canonical ≫ Ubuntu Linux Version16.04 SwEditionlts
Debian ≫ Debian Linux Version8.0
Debian ≫ Debian Linux Version9.0
Debian ≫ Debian Linux Version10.0
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.84% 0.53
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://www.debian.org/security/2019/dsa-4497
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/08/msg00017.html
Third Party Advisory
Mailing List
https://usn.ubuntu.com/4145-1/
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/08/msg00016.html
Third Party Advisory
Mailing List
http://packetstormsecurity.com/files/154059/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html
Third Party Advisory
VDB Entry
https://seclists.org/bugtraq/2019/Aug/26
Third Party Advisory
Mailing List
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=99253eb750fda6a644d5188fb26c43bad8d5a745
Patch
Vendor Advisory
https://github.com/torvalds/linux/commit/99253eb750fda6a644d5188fb26c43bad8d5a745
Patch
Third Party Advisory
https://lists.openwall.net/netdev/2017/12/04/40
Third Party Advisory
Mailing List
https://pulsesecurity.co.nz/advisories/linux-kernel-4.9-inetcsklistenstop-gpf
Third Party Advisory
Exploit
https://salsa.debian.org/kernel-team/linux/commit/baefcdc2f29923e7325ce4e1a72c3ff0a9800f32
Third Party Advisory
https://support.f5.com/csp/article/K41582535
Third Party Advisory
https://support.f5.com/csp/article/K41582535?utm_source=f5support&amp%3Butm_medium=RSS