Denial of service in Linux kernel



Risk Low
Patch available YES
Number of vulnerabilities 1
CVE-ID CVE-2017-7308
CWE-ID CWE-787
Exploitation vector Local
Public exploit Public exploit code for vulnerability #1 is available.
Vulnerable software
 Linux kernel
Operating systems & Components / Operating system

linux_kernel (Debian package)
Operating systems & Components / Operating system package or component

Vendor Linux Foundation
Debian

Security Bulletin

This security bulletin contains one low risk vulnerability.

1) Heap-out-of-bounds write

EUVDB-ID: #VU6526

Risk: Low

CVSSv4.0: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:A/U:Clear]

CVE-ID: CVE-2017-7308

CWE-ID: CWE-787 - Out-of-bounds write

Exploit availability: Yes

Description

The vulnerability allows a local attacker to cause DoS conditions.

The weakness exists due to improper validation of certain block-size data by the packet_set_ring function in net/packet/af_packet.c. A local attacker can provide specific parameters to the PACKET_RX_RING option on an AF_PACKET socket with a TPACKET_V3 ring buffer version enabled, trigger heap-out-of-bounds write and cause denial of service.

Successful exploitation of the vulnerability results in denial of service.

Mitigation

Update to version 4.9.18-1.

Vulnerable software versions

Linux kernel: 4.0.1 - 4.10.6

linux_kernel (Debian package): 4.6.4-1 - 4.7.2-1

CPE2.3 External links

https://googleprojectzero.blogspot.com/2017/05/exploiting-linux-kernel-via-packet.html


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability. However, a fully functional exploit for this vulnerability is available.



###SIDEBAR###