CVE-2017-9077
kernel: net: tcp_v6_syn_recv_sock function mishandles inheritance
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
The tcp_v6_syn_recv_sock function in net/ipv6/tcp_ipv6.c in the Linux kernel through 4.11.1 mishandles inheritance, which allows local users to cause a denial of service or possibly have unspecified other impact via crafted system calls, a related issue to CVE-2017-8890.
La función tcp_v6_syn_recv_sock en el archivo net/ipv6/tcp_ipv6.c en el kernel de Linux hasta versión 4.11.1, el manejo inapropiado de la herencia, permite a los usuarios locales causar una denegación de servicio o posiblemente tener otro impacto no especificado por medio de llamadas del sistema, un problema relacionado con CVE-2017 -8890.
The tcp_v6_syn_recv_sock function in net/ipv6/tcp_ipv6.c in the Linux kernel mishandles inheritance, which allows local users to cause a denial of service or possibly have unspecified other impact via crafted system calls, a related issue to CVE-2017-8890. An unprivileged local user could use this flaw to induce kernel memory corruption on the system, leading to a crash. Due to the nature of the flaw, privilege escalation cannot be fully ruled out, although we believe it is unlikely.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2017-05-19 CVE Reserved
- 2017-05-19 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-05 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-416: Use After Free
CAPEC
References (12)
| URL | Tag | Source |
|---|---|---|
| http://www.securityfocus.com/bid/98583 | Third Party Advisory | |
| https://source.android.com/security/bulletin/2017-11-01 | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://www.debian.org/security/2017/dsa-3886 | 2023-02-24 | |
| https://access.redhat.com/errata/RHSA-2017:1842 | 2023-02-24 | |
| https://access.redhat.com/errata/RHSA-2017:2077 | 2023-02-24 | |
| https://access.redhat.com/errata/RHSA-2017:2669 | 2023-02-24 | |
| https://access.redhat.com/errata/RHSA-2018:1854 | 2023-02-24 | |
| https://access.redhat.com/security/cve/CVE-2017-9077 | 2018-06-19 | |
| https://bugzilla.redhat.com/show_bug.cgi?id=1452744 | 2018-06-19 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | < 3.2.89 Search vendor "Linux" for product "Linux Kernel" and version " < 3.2.89" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | >= 3.3 < 3.16.44 Search vendor "Linux" for product "Linux Kernel" and version " >= 3.3 < 3.16.44" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | >= 3.17 < 3.18.84 Search vendor "Linux" for product "Linux Kernel" and version " >= 3.17 < 3.18.84" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | >= 3.19 < 4.4.71 Search vendor "Linux" for product "Linux Kernel" and version " >= 3.19 < 4.4.71" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | >= 4.5 < 4.9.31 Search vendor "Linux" for product "Linux Kernel" and version " >= 4.5 < 4.9.31" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | >= 4.10 < 4.11.4 Search vendor "Linux" for product "Linux Kernel" and version " >= 4.10 < 4.11.4" | - |
Affected
| ||||||