Vulnerability in N/a
CVE-2017-18017
The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service (use-after-free and memory corruption) or possibly have unspecifi…
EPSS: 0.522 (98.8th percentile) — read the EPSS interpretation.
Affected products
- N/a — versions n/a
Public proof-of-concept exploits
References
- DSA-4187 (vendor-advisory, x_refsource_DEBIAN)
- USN-3583-2 (x_refsource_UBUNTU, vendor-advisory)
- patchwork.ozlabs.org/patch/746618/ (x_refsource_MISC)
- RHSA-2018:1737 (x_refsource_REDHAT, vendor-advisory)
- www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.36 (x_refsource_MISC)
- lkml.org/lkml/2017/4/2/13 (x_refsource_MISC)
- RHSA-2018:1062 (x_refsource_REDHAT, vendor-advisory)
- RHSA-2018:1319 (x_refsource_REDHAT, vendor-advisory)
- help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+D… (x_refsource_CONFIRM)
- USN-3583-1 (x_refsource_UBUNTU, vendor-advisory)
Frequently asked questions
- What is CVE-2017-18017?
- CVE-2017-18017 is a vulnerability in N/a. Published 2018-01-03.
- Is CVE-2017-18017 known to be exploited?
- 5 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.