The ip6gre_err function in net/ipv6/ip6_gre.c in the Linux kernel allows remote attackers to have unspecified impact via vectors involving GRE flags in an IPv6 packet, which trigger an out-of-bounds access.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade kernel | Mar 7, 2017 | Feb 22, 2017 |
| Debian | — | Upgrade linux | Feb 24, 2017 | Feb 22, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-headersUpgrade perfUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-debuginfo | Sep 16, 2021 | Mar 23, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-develUpgrade kernel-toolsUpgrade python-perfUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64 | Nov 19, 2019 | Mar 23, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-headersUpgrade perfUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-devel | Dec 11, 2019 | Mar 23, 2017 |
| Oracle_linux | — | Upgrade kernel-uek | Apr 4, 2017 | Feb 5, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 5, 2017 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-ec2-develUpgrade kernel-ec2Upgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-defaultUpgrade cluster-network-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-ec2-extraUpgrade ocfs2-kmp-default | Feb 23, 2017 | Feb 22, 2017 |
| Ubuntu | — | Upgrade linux-image-4.4.0-1057-snapdragonUpgrade linux-image-snapdragonUpgrade linux-image-3.13.0-157-generic-lpaeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-gkeUpgrade linux-image-powerpc-e500Upgrade linux-image-powerpc-smpUpgrade linux-image-genericUpgrade linux-image-3.13.0-157-powerpc64-smpUpgrade linux-image-4.4.0-75-powerpc-e500mcUpgrade linux-image-4.4.0-1054-raspi2Upgrade linux-image-lowlatencyUpgrade linux-image-3.13.0-157-powerpc64-embUpgrade linux-image-4.4.0-75-genericUpgrade linux-image-3.13.0-157-genericUpgrade linux-image-3.13.0-157-lowlatencyUpgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-1012-gkeUpgrade linux-image-3.13.0-157-powerpc-e500mcUpgrade linux-image-powerpc64-smpUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.10.0-27-genericUpgrade linux-image-4.4.0-1016-awsUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-75-powerpc64-smpUpgrade linux-image-raspi2Upgrade linux-image-3.13.0-157-powerpc-e500Upgrade linux-image-4.4.0-75-generic-lpaeUpgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-75-lowlatencyUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-3.13.0-157-powerpc-smpUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.10.0-27-generic-lpaeUpgrade linux-image-4.4.0-75-powerpc-smpUpgrade linux-image-4.10.0-27-lowlatencyUpgrade linux-image-awsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-hwe-16.04 | Jul 1, 2017 | Feb 22, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub