exploitDog

CVE-2017-18017

Опубликовано: 03 янв. 2018

Источник: nvd

CVSS3: 9.8

CVSS2: 10

EPSS Средний

Описание

The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service (use-after-free and memory corruption) or possibly have unspecified other impact by leveraging the presence of xt_TCPMSS in an iptables action.

Ссылки

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2638fd0f92d4397884fd991d8f4925cb3f081901
Patch
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00008.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00013.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00015.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00038.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00047.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2018-03/msg00030.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2018-03/msg00067.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2018-03/msg00070.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2018-03/msg00072.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2018-04/msg00014.html
Mailing List
Third Party Advisory
http://patchwork.ozlabs.org/patch/746618/
Patch
Third Party Advisory
http://www.securityfocus.com/bid/102367
Broken Link
Third Party Advisory
VDB Entry
http://www.ubuntu.com/usn/USN-3583-1
Third Party Advisory
http://www.ubuntu.com/usn/USN-3583-2
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:0676
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:1062
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:1130
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:1170
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:1319
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 3.2 (включая) до 3.2.99 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 3.3 (включая) до 3.10.108 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 3.11 (включая) до 3.16.54 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 3.17 (включая) до 3.18.60 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 3.19 (включая) до 4.1.43 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 4.2 (включая) до 4.4.76 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 4.5 (включая) до 4.9.36 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 4.10 (включая) до 4.11 (исключая)

Конфигурация 2

Одно из

cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

Конфигурация 3

cpe:2.3:o:arista:eos:4.20.1fx-virtual-router:*:*:*:*:*:*:*

Конфигурация 4

cpe:2.3:a:f5:arx:*:*:*:*:*:*:*:*

Версия от 6.2.0 (включая) до 6.4.0 (включая)

Конфигурация 5

Одно из

cpe:2.3:a:suse:caas_platform:*:*:*:*:*:*:*:*

cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp3:*:*:*:*:*:*

cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp4:*:*:*:*:*:*

cpe:2.3:a:suse:linux_enterprise_module_for_public_cloud:12:*:*:*:*:*:*:*

cpe:2.3:a:suse:linux_enterprise_point_of_sale:11:sp3:*:*:*:*:*:*

cpe:2.3:a:suse:openstack_cloud:6:*:*:*:*:*:*:*

cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_desktop:12:sp2:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_desktop:12:sp3:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_high_availability:12:sp2:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_high_availability:12:sp3:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_high_availability_extension:11:sp4:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_live_patching:12:-:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_live_patching:12:sp3:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_real_time_extension:11:sp4:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_real_time_extension:12:sp2:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_real_time_extension:12:sp3:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:ltss:*:*:*

cpe:2.3:o:suse:linux_enterprise_server:11:sp4:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_server:12:*:*:*:ltss:*:*:*

cpe:2.3:o:suse:linux_enterprise_server:12:sp1:*:*:*:sap:*:*

cpe:2.3:o:suse:linux_enterprise_server:12:sp1:*:*:ltss:*:*:*

cpe:2.3:o:suse:linux_enterprise_server:12:sp2:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_server:12:sp2:*:*:*:*:raspberry_pi:*

cpe:2.3:o:suse:linux_enterprise_server:12:sp3:*:*:-:-:*:*

cpe:2.3:o:suse:linux_enterprise_software_development_kit:11:sp4:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:sp2:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:sp3:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_workstation_extension:12:sp2:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_workstation_extension:12:sp3:*:*:*:*:*:*

Конфигурация 6

cpe:2.3:a:openstack:cloud_magnum_orchestration:7:*:*:*:*:*:*:*

Конфигурация 7

Одно из

cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*

Конфигурация 8

Одно из

cpe:2.3:a:redhat:mrg_realtime:2.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:7.3:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_for_real_time:7:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_for_real_time_for_nfv:7:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*

EPSS

Процентиль: 97%

0.37592

Средний

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-416

Связанные уязвимости

CVE-2017-18017

CVSS3: 9.8

ubuntu

больше 7 лет назад

The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service (use-after-free and memory corruption) or possibly have unspecified other impact by leveraging the presence of xt_TCPMSS in an iptables action.

CVE-2017-18017

CVSS3: 6.5

redhat

больше 7 лет назад

The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service (use-after-free and memory corruption) or possibly have unspecified other impact by leveraging the presence of xt_TCPMSS in an iptables action.

CVE-2017-18017

CVSS3: 9.8

debian

больше 7 лет назад

The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the ...

GHSA-3fj5-q6p4-25m2

CVSS3: 9.8

github

около 3 лет назад

The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service (use-after-free and memory corruption) or possibly have unspecified other impact by leveraging the presence of xt_TCPMSS in an iptables action.

ELSA-2018-4268

oracle-oval

больше 6 лет назад

ELSA-2018-4268: Unbreakable Enterprise kernel security update (IMPORTANT)

EPSS

Процентиль: 97%

0.37592

Средний

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-416