Home

CVE-2017-16939

Description

The XFRM dump policy implementation in net/xfrm/xfrm_user.c in the Linux kernel before 4.13.11 allows local users to gain privileges or cause a denial of service (use-after-free) via a crafted SO_RCVBUF setsockopt system call in conjunction with XFRM_MSG_GETPOLICY Netlink messages.

Risk Information

Base Score
7.8
MODERATE
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
7.155

Associated Vulnerability

VulnerabilityOS Platform
Linux kernel (USN-3508-1) linux-image-4.10.0-42-generic_4.10.0-42.46_i386.debLinux
Linux kernel (USN-3508-1) linux-image-4.10.0-42-generic_4.10.0-42.46_amd64.debLinux
Linux kernel (USN-3508-1) linux-image-4.10.0-42-lowlatency_4.10.0-42.46_i386.debLinux
Linux kernel (USN-3508-1) linux-image-4.10.0-42-lowlatency_4.10.0-42.46_amd64.debLinux
Linux hardware enablement (HWE) kernel (USN-3508-2) linux-image-4.10.0-42-generic_4.10.0-42.46~16.04.1_i386.debLinux
Linux hardware enablement (HWE) kernel (USN-3508-2) linux-image-4.10.0-42-generic_4.10.0-42.46~16.04.1_amd64.debLinux
Linux hardware enablement (HWE) kernel (USN-3508-2) linux-image-generic-hwe-16.04_4.10.0.42.44_i386.debLinux
Linux hardware enablement (HWE) kernel (USN-3508-2) linux-image-generic-hwe-16.04_4.10.0.42.44_amd64.debLinux
Linux hardware enablement (HWE) kernel (USN-3508-2) linux-image-4.10.0-42-lowlatency_4.10.0-42.46~16.04.1_i386.debLinux
Linux hardware enablement (HWE) kernel (USN-3508-2) linux-image-4.10.0-42-lowlatency_4.10.0-42.46~16.04.1_amd64.debLinux
Linux hardware enablement (HWE) kernel (USN-3508-2) linux-image-lowlatency-hwe-16.04_4.10.0.42.44_i386.debLinux
Linux hardware enablement (HWE) kernel (USN-3508-2) linux-image-lowlatency-hwe-16.04_4.10.0.42.44_amd64.debLinux
Linux kernel (USN-3509-1) linux-image-aws_4.4.0.1043.45_amd64.debLinux
Linux kernel (USN-3509-1) linux-image-kvm_4.4.0.1012.12_amd64.debLinux
Linux kernel (USN-3509-1) linux-image-generic_4.4.0.103.108_i386.debLinux
Linux kernel (USN-3509-1) linux-image-generic_4.4.0.103.108_amd64.debLinux
Linux kernel (USN-3509-1) linux-image-lowlatency_4.4.0.103.108_i386.debLinux
Linux kernel (USN-3509-1) linux-image-lowlatency_4.4.0.103.108_amd64.debLinux
Linux kernel (USN-3509-1) linux-image-4.4.0-1012-kvm_4.4.0-1012.17_amd64.debLinux
Linux kernel (USN-3509-1) linux-image-4.4.0-1043-aws_4.4.0-1043.52_amd64.debLinux
Linux kernel (USN-3509-1) linux-image-4.4.0-103-generic_4.4.0-103.126_i386.debLinux
Linux kernel (USN-3509-1) linux-image-4.4.0-103-generic_4.4.0-103.126_amd64.debLinux
Linux kernel (USN-3509-1) linux-image-4.4.0-103-lowlatency_4.4.0-103.126_i386.debLinux
Linux kernel (USN-3509-1) linux-image-4.4.0-103-lowlatency_4.4.0-103.126_amd64.debLinux
Linux kernel for Amazon Web Services (AWS) systems (USN-3509-2) linux-image-aws_4.4.0.1005.5_amd64.debLinux
Linux kernel for Amazon Web Services (AWS) systems (USN-3509-2) linux-image-4.4.0-1005-aws_4.4.0-1005.5_amd64.debLinux
Linux kernel for Amazon Web Services (AWS) systems (USN-3509-2) linux-image-4.4.0-103-generic_4.4.0-103.126~14.04.1_i386.debLinux
Linux kernel for Amazon Web Services (AWS) systems (USN-3509-2) linux-image-4.4.0-103-generic_4.4.0-103.126~14.04.1_amd64.debLinux
Linux kernel for Amazon Web Services (AWS) systems (USN-3509-2) linux-image-generic-lts-xenial_4.4.0.103.86_i386.debLinux
Linux kernel for Amazon Web Services (AWS) systems (USN-3509-2) linux-image-generic-lts-xenial_4.4.0.103.86_amd64.debLinux
Linux kernel for Amazon Web Services (AWS) systems (USN-3509-2) linux-image-4.4.0-103-lowlatency_4.4.0-103.126~14.04.1_i386.debLinux
Linux kernel for Amazon Web Services (AWS) systems (USN-3509-2) linux-image-4.4.0-103-lowlatency_4.4.0-103.126~14.04.1_amd64.debLinux
Linux kernel for Amazon Web Services (AWS) systems (USN-3509-2) linux-image-lowlatency-lts-xenial_4.4.0.103.86_i386.debLinux
Linux kernel for Amazon Web Services (AWS) systems (USN-3509-2) linux-image-lowlatency-lts-xenial_4.4.0.103.86_amd64.debLinux
Linux kernel (USN-3510-1) linux-image-generic_3.13.0.137.146_i386.debLinux
Linux kernel (USN-3510-1) linux-image-generic_3.13.0.137.146_amd64.debLinux
Linux kernel (USN-3510-1) linux-image-lowlatency_3.13.0.137.146_i386.debLinux
Linux kernel (USN-3510-1) linux-image-lowlatency_3.13.0.137.146_amd64.debLinux
Linux kernel (USN-3510-1) linux-image-3.13.0-137-generic_3.13.0-137.186_i386.debLinux
Linux kernel (USN-3510-1) linux-image-3.13.0-137-generic_3.13.0-137.186_amd64.debLinux
Linux kernel (USN-3510-1) linux-image-3.13.0-137-lowlatency_3.13.0-137.186_i386.debLinux
Linux kernel (USN-3510-1) linux-image-3.13.0-137-lowlatency_3.13.0-137.186_amd64.debLinux
Linux kernel for Microsoft Azure Cloud systems (USN-3511-1) linux-image-azure_4.11.0.1016.16_amd64.debLinux
Linux kernel for Microsoft Azure Cloud systems (USN-3511-1) linux-image-4.11.0-1016-azure_4.11.0-1016.16_amd64.debLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234