7.8

CVE-2017-7979

The cookie feature in the packet action API implementation in net/sched/act_api.c in the Linux kernel 4.11.x through 4.11-rc7 mishandles the tb nlattr array, which allows local users to cause a denial of service (uninitialized memory access and refcount underflow, and system hang or crash) or possibly have unspecified other impact via "tc filter add" commands in certain contexts. NOTE: this does not affect stable kernels, such as 4.10.x, from kernel.org.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version 4.11 Update rc1
Linux ≫ Linux Kernel Version 4.11 Update rc2
Linux ≫ Linux Kernel Version 4.11 Update rc3
Linux ≫ Linux Kernel Version 4.11 Update rc4
Linux ≫ Linux Kernel Version 4.11 Update rc5
Linux ≫ Linux Kernel Version 4.11 Update rc6
Linux ≫ Linux Kernel Version 4.11 Update rc7
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.4% 0.311
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://marc.info/?l=linux-netdev&m=149200742616349
Patch
Third Party Advisory
Mailing List
http://marc.info/?l=linux-netdev&m=149200746116365
Patch
Third Party Advisory
Mailing List
http://marc.info/?l=linux-netdev&m=149200746116366
Patch
Third Party Advisory
Mailing List
http://marc.info/?l=linux-netdev&m=149251041420194
Patch
Third Party Advisory
Mailing List
http://marc.info/?l=linux-netdev&m=149251041420195
Patch
Third Party Advisory
Mailing List
http://www.securityfocus.com/bid/97969
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1682368
Patch
Issue Tracking
https://bugzilla.proxmox.com/show_bug.cgi?id=1351
Patch
Issue Tracking