Improper input validation in Linux kernel - CVE-2017-17805

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU9775

Improper input validation in Linux kernel - CVE-2017-17805

Published: December 26, 2017


Vulnerability identifier: #VU9775
CSH Severity: Low
CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2017-17805
CWE-ID: CWE-20
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local attacker to cause DoS condition on the target system.

The weakness exists due to the Salsa20 encryption algorithm in the Linux kernel does not correctly handle zero-length inputs. A local attacker able to use the AF_ALG-based skcipher interface (CONFIG_CRYPTO_USER_API_SKCIPHER) can trigger uninitialized-memory free and cause the kernel to crash or execute a specially crafted sequence of system calls that use the blkcipher_walk API.

Successful exploitation of the vulnerability results in denial of service.

Affected software

Linux kernel
Debian Linux
Arch Linux
Red Hat Enterprise Linux for Power, big endian
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power 9
Red Hat Enterprise Linux for IBM System z (Structure A)
SUSE Linux

kernel (Red Hat package)
kernel-alt (Red Hat package)
Data Computing Appliance (DCA)

How to mitigate CVE-2017-17805

Update to version 4.14.8.

kernel (Red Hat package) - update to 2.6.32-754.18.2.el6
Data Computing Appliance (DCA) - update to 3.5.4.0
kernel-alt (Red Hat package) - update to 4.14.0-115.el7a

External References

Related Security Bulletins