The tipc_msg_build function in net/tipc/msg.c in the Linux kernel through 4.8.11 does not validate the relationship between the minimum fragment length and the maximum packet size, which allows local users to gain privileges or cause a denial of service (heap-based buffer overflow) by leveraging the CAP_NET_ADMIN capability.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 28, 2016 |
| Oracle_linux | — | Upgrade kernel-uek-debugUpgrade kernel-uek-debug-develUpgrade kernel-uek-firmwareUpgrade dtrace-modulesUpgrade kernel-uek-develUpgrade kernel-uekUpgrade kernel-uek-doc | Apr 4, 2017 | Nov 27, 2016 |
| Suse | — | Upgrade dlm-kmp-defaultUpgrade kernel-ec2-extraUpgrade kernel-defaultUpgrade cluster-md-kmp-defaultUpgrade cluster-network-kmp-defaultUpgrade kernel-ec2-develUpgrade kernel-docsUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-ec2Upgrade kernel-obs-build | Dec 9, 2016 | Nov 27, 2016 |
| Ubuntu | — | Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.8.0-37-lowlatencyUpgrade linux-image-generic-lts-trustyUpgrade linux-image-4.4.0-79-powerpc64-embUpgrade linux-image-4.4.0-79-lowlatencyUpgrade linux-image-4.8.0-37-genericUpgrade linux-image-3.13.0-135-powerpc64-embUpgrade linux-image-4.4.0-1057-raspi2Upgrade linux-image-powerpc64-smpUpgrade linux-image-powerpc-smpUpgrade linux-image-3.13.0-135-lowlatencyUpgrade linux-image-snapdragonUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-3.13.0-135-powerpc64-smpUpgrade linux-image-3.13.0-135-powerpc-e500mcUpgrade linux-image-3.13.0-135-genericUpgrade linux-image-4.8.0-37-powerpc-e500mcUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-79-powerpc-e500mcUpgrade linux-image-4.8.0-37-generic-lpaeUpgrade linux-image-3.13.0-135-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-4.4.0-1018-awsUpgrade linux-image-awsUpgrade linux-image-powerpc-e500Upgrade linux-image-3.13.0-135-powerpc-e500Upgrade linux-image-4.4.0-79-generic-lpaeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-lpaeUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-1059-snapdragonUpgrade linux-image-4.8.0-1024-raspi2Upgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-raspi2Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.8.0-37-powerpc-smpUpgrade linux-image-4.4.0-79-powerpc64-smpUpgrade linux-image-4.8.0-37-powerpc64-embUpgrade linux-image-virtualUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-79-powerpc-smpUpgrade linux-image-powerpc64-embUpgrade linux-image-lowlatencyUpgrade linux-image-3.13.0-135-powerpc-smpUpgrade linux-image-genericUpgrade linux-image-4.4.0-79-genericUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-1014-gke | Feb 4, 2017 | Nov 27, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub