The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service (use-after-free and memory corruption) or possibly have unspecified other impact by leveraging the presence of xt_TCPMSS in an iptables action.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | May 11, 2018 | Jan 3, 2018 |
| Debian | — | Upgrade linux | May 2, 2018 | Jan 3, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernelUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-headersUpgrade perf | Jan 30, 2018 | Jan 3, 2018 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Apr 19, 2018 | Jan 3, 2018 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Apr 11, 2018 | Jan 3, 2018 |
| Suse | — | Upgrade kernel-ec2-extraUpgrade kernel-ec2Upgrade kernel-defaultUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-docsUpgrade kernel-ec2-develUpgrade ocfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade cluster-network-kmp-default | Feb 9, 2018 | Jan 3, 2018 |
| Ubuntu | — | Upgrade linux-image-3.13.0-142-powerpc-e500mcUpgrade linux-image-powerpc-e500Upgrade linux-image-powerpc64-smpUpgrade linux-image-3.13.0-142-powerpc-e500Upgrade linux-image-3.13.0-142-genericUpgrade linux-image-generic-lts-trustyUpgrade linux-image-3.13.0-142-powerpc64-embUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-powerpc-e500mcUpgrade linux-image-3.13.0-142-generic-lpaeUpgrade linux-image-3.13.0-142-lowlatencyUpgrade linux-image-3.13.0-142-powerpc-smpUpgrade linux-image-lowlatencyUpgrade linux-image-powerpc-smpUpgrade linux-image-genericUpgrade linux-image-3.13.0-142-powerpc64-smpUpgrade linux-image-generic-lpaeUpgrade linux-image-powerpc64-emb | Feb 24, 2018 | Jan 3, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 3, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub