ID:6061 - Exploit for Heap-out-of-bounds write in Linux kernel and linux_kernel (Debian package) - CVE-2017-7308

Link to public exploit:

Vulnerability description

The weakness exists due to improper validation of certain block-size data by the packet_set_ring function in net/packet/af_packet.c. A local attacker can provide specific parameters to the PACKET_RX_RING option on an AF_PACKET socket with a TPACKET_V3 ring buffer version enabled, trigger heap-out-of-bounds write and cause denial of service.

Successful exploitation of the vulnerability results in denial of service.

Remediation