CVE-2017-18017

Advisory lineage Upstream: 0 Downstream: 20
Modified
Published: 03 Jan 2018, 06:00
Last modified:03 Jan 2025, 12:04

Vulnerability Summary

Overall Risk (default)
high
70/100
CVSS Score
10 HIGH
v2.0 (nvd)
EPSS Score
34.31% HIGH
34% probability +0.73%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

03 Jan 2018, 06:00
Published
Vulnerability first disclosed
03 Jan 2025, 12:04
Last Modified
Vulnerability information updated

Description

The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service (use-after-free and memory corruption) or possibly have unspecified other impact by leveraging the presence of xt_TCPMSS in an iptables action.

CVSS Metrics

  • v3.1•CRITICAL•Score: 9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
  • v2.0•HIGH•Score: 10AV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS Trends

Current EPSS score: 34.31%• Percentile: 97%

Techniques & Countermeasures

  • CWE-416•Use After Free

    The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

Affected Systems

  • arista•eos

    4.20.1fx-virtual-router

  • canonical•ubuntu_linux

    12.04 | 14.04

  • debian•debian_linux

    7.0 | 8.0

  • f5•arx

    ≥ 6.2.0, ≤ 6.4.0

  • linux•linux_kernel

    ≥ 3.2, < 3.2.99 | ≥ 3.3, < 3.10.108 | ≥ 3.11, < 3.16.54 | ≥ 3.17, < 3.18.60 | ≥ 3.19, < 4.1.43 | ≥ 4.2, < 4.4.76 | ≥ 4.5, < 4.9.36 | ≥ 4.10, < 4.11

  • openstack•cloud_magnum_orchestration

    7

  • opensuse•leap

    42.3

  • redhat•enterprise_linux_desktop

    6.0 | 7.0

  • redhat•enterprise_linux_eus

    7.3 | 7.4 | 7.6 | 7.7

  • redhat•enterprise_linux_for_real_time

    7

  • redhat•enterprise_linux_for_real_time_for_nfv

    7

  • redhat•enterprise_linux_server

    6.0 | 7.0

  • redhat•enterprise_linux_server_aus

    7.3 | 7.4 | 7.6 | 7.7

  • redhat•enterprise_linux_server_tus

    7.3 | 7.4 | 7.6 | 7.7

  • redhat•enterprise_linux_workstation

    6.0 | 7.0

  • redhat•mrg_realtime

    2.0

  • suse•linux_enterprise_debuginfo

    11:sp3 | 11:sp4

  • suse•linux_enterprise_desktop

    12:sp2 | 12:sp3

  • suse•linux_enterprise_high_availability

    12:sp2 | 12:sp3

  • suse•linux_enterprise_high_availability_extension

    11:sp4

  • suse•linux_enterprise_live_patching

    12 | 12:sp3

  • suse•linux_enterprise_module_for_public_cloud

    12

  • suse•linux_enterprise_point_of_sale

    11:sp3

  • suse•linux_enterprise_real_time_extension

    11:sp4 | 12:sp2 | 12:sp3

  • suse•linux_enterprise_server

    11:sp3 | 11:sp4 | 12 | 12:sp1 | 12:sp2 | 12:sp3

  • suse•linux_enterprise_software_development_kit

    11:sp4 | 12:sp2 | 12:sp3

  • suse•linux_enterprise_workstation_extension

    12:sp2 | 12:sp3

  • suse•openstack_cloud

    6

References (33)