CVE-2017-18017: arista eos Use After Free
Modified
AliasesUBUNTU-CVE-2017-18017DEBIAN-CVE-2017-18017
Published 03-01-2018Last modified 03-01-2025
Vulnerability summary
CVE-2017-18017 is a high (CVSS 10.0) Use After Free vulnerability in arista eos. EPSS estimates a 52.84% chance of exploitation in the next 30 days, higher than 98.9% of scored vulnerabilities.
Priority
Prioritisesevere
Severe, CVSS 9.8 (NVD); no exploitation reported by the 5 checked sources; EPSS 53% (FIRST, 03-11-2026)
Source freshness unavailable
How is this decided?CVSS score
10.0/10
010
High · v2.0 (NVD)EPSS score
52.84%
0%100%
Critical · 0.00 pp in 30 daysKEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 18 · Related 10Timeline
- 03-01-2018PublishedVulnerability first disclosed.
- 03-01-2025Last modifiedVulnerability information updated.
Description
The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service (use-after-free and memory corruption) or possibly have unspecified other impact by leveraging the presence of xt_TCPMSS in an iptables action.
CVSS metrics
5 scores · 3 sources · 3 versionsCritical 9.8Preferred score · NVD (NIST)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HSourcesAll 3 agree
- OSV · UbuntuEcosystem advisory · calculated9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Critical 9.8Preferred score · OSV · Ubuntu (Ecosystem advisory) · calculated from vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HSourcesSingle source
High 10.0Preferred score · NVD (NIST)
AV:N/AC:L/Au:N/C:C/I:C/A:CSourcesSingle source
EPSS trend
Probability
52.84%
Chance of exploitation in the next 30 days
Percentile
99%
Versus all other CVEs
30-day change
No change 0.00 pp
From 52.84% on 04-10-2026
04-10-202603-11-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Version check
Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.
Ubuntu18 products
- linux< 3.13.0-142.191 | < 4.4.0-89.112
- linux-aws< 4.4.0-1028.37
- linux-azure-6.11All versions (No fix recorded)
- linux-azure-fdeAll versions (No fix recorded)
- linux-azure-fde-5.15All versions (No fix recorded)
Suse12 products
- linux_enterprise_debuginfo11:sp3 | 11:sp4
- linux_enterprise_desktop12:sp2 | 12:sp3
- linux_enterprise_high_availability12:sp2 | 12:sp3
- linux_enterprise_high_availability_extension11:sp4
- linux_enterprise_live_patching12 | 12:sp3
Redhat9 products
- enterprise_linux_desktop6.0 | 7.0
- enterprise_linux_eus7.3 | 7.4 | 7.6 | 7.7
- enterprise_linux_for_real_time7
- enterprise_linux_for_real_time_for_nfv7
- enterprise_linux_server6.0 | 7.0
Debian2 products
- linux< 4.11.6-1
- debian_linuxEOL7.0 | 8.0
Arista1 product
- eos4.20.1fx-virtual-router
Canonical1 product
- ubuntu_linuxEOL12.04 | 14.04
F51 product
- arx≥ 6.2.0, ≤ 6.4.0
Linux1 product
- linux_kernel≥ 3.2, < 3.2.99 | ≥ 3.3, < 3.10.108 | ≥ 3.11, < 3.16.54 | ≥ 3.17, < 3.18.60 | ≥ 3.19, < 4.1.43 | ≥ 4.2, < 4.4.76 | ≥ 4.5, < 4.9.36 | ≥ 4.10, < 4.11
Openstack1 product
Opensuse1 product
- leapEOL42.3
10 vendors · 47 products
References
38 links
- www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.36X Refsource MISCRelease NotesVendor AdvisoryREPORT
Show all 38 references
- bugs.launchpad.net/ubuntu/+source/linux/+bug/1739765X Refsource MISCIssue TrackingThird Party AdvisoryREPORT
- github.com/torvalds/linux/commit/2638fd0f92d4397884fd991d8f4925cb3f081901X Refsource MISCPatchThird Party AdvisoryREPORT
- lists.debian.org/debian-lts-announce/2018/05/msg00000.htmlMailing ListX Refsource MLISTThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2018-03/msg00067.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2018-03/msg00072.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2018-02/msg00008.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2018-02/msg00047.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2018-02/msg00013.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2018-04/msg00014.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2018-02/msg00015.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2018-02/msg00038.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2018-03/msg00070.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2018-03/msg00030.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- www.arista.com/en/support/advisories-notices/security-advisories/4577-security-advisory-34X Refsource MISCMitigationThird Party Advisory