CVE-2017-18017
Description
The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service (use-after-free and memory corruption) or possibly have unspecified other impact by leveraging the presence of xt_TCPMSS in an iptables action.
Risk Information
Base Score
9.8
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
40.366
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| (RHSA-2018:1737) Important: kernel security and bug fix update kernel-3.10.0-514.51.1.el7.x86_64.rpm | Linux |
| (RHSA-2018:1737) Important: kernel security and bug fix update kernel-abi-whitelists-3.10.0-514.51.1.el7.noarch.rpm | Linux |
| (RHSA-2018:1737) Important: kernel security and bug fix update kernel-debug-3.10.0-514.51.1.el7.x86_64.rpm | Linux |
| (RHSA-2018:1737) Important: kernel security and bug fix update kernel-debug-devel-3.10.0-514.51.1.el7.x86_64.rpm | Linux |
| (RHSA-2018:1737) Important: kernel security and bug fix update kernel-devel-3.10.0-514.51.1.el7.x86_64.rpm | Linux |
| (RHSA-2018:1737) Important: kernel security and bug fix update kernel-doc-3.10.0-514.51.1.el7.noarch.rpm | Linux |
| (RHSA-2018:1737) Important: kernel security and bug fix update kernel-headers-3.10.0-514.51.1.el7.x86_64.rpm | Linux |
| (RHSA-2018:1737) Important: kernel security and bug fix update kernel-tools-3.10.0-514.51.1.el7.x86_64.rpm | Linux |
| (RHSA-2018:1737) Important: kernel security and bug fix update kernel-tools-libs-3.10.0-514.51.1.el7.x86_64.rpm | Linux |
| (RHSA-2018:1737) Important: kernel security and bug fix update kernel-tools-libs-devel-3.10.0-514.51.1.el7.x86_64.rpm | Linux |
| (RHSA-2018:1737) Important: kernel security and bug fix update perf-3.10.0-514.51.1.el7.x86_64.rpm | Linux |
| (RHSA-2018:1737) Important: kernel security and bug fix update python-perf-3.10.0-514.51.1.el7.x86_64.rpm | Linux |
| Dtrace-modules-3.8.13-118.26.1.el6uek update (ELSA-2018-4268) dtrace-modules-3.8.13-118.26.1.el6uek-0.4.5-3.el6.x86_64.rpm | Linux |
| Dtrace-modules-3.8.13-118.26.1.el7uek update (ELSA-2018-4268) dtrace-modules-3.8.13-118.26.1.el7uek-0.4.5-3.el7.x86_64.rpm | Linux |
| Use After Free Vulnerability (CVE-2017-18017) | NCM |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234