The ip6gre_err function in net/ipv6/ip6_gre.c in the Linux kernel allows remote attackers to have unspecified impact via vectors involving GRE flags in an IPv6 packet, which trigger an out-of-bounds access.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade kernel | Mar 7, 2017 | Feb 22, 2017 |
| Debian | — | Upgrade linux | Feb 24, 2017 | Feb 22, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-develUpgrade kernel-debug-develUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-headersUpgrade kernel-debug | Sep 16, 2021 | Mar 23, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade perfUpgrade python-perfUpgrade kernel-develUpgrade kernel-toolsUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libs | Nov 19, 2019 | Mar 23, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-develUpgrade python-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-headers | Dec 11, 2019 | Mar 23, 2017 |
| Oracle_linux | — | Upgrade kernel-uek | Apr 4, 2017 | Feb 5, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 5, 2017 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-ec2-extraUpgrade ocfs2-kmp-defaultUpgrade cluster-network-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-docsUpgrade cluster-md-kmp-defaultUpgrade kernel-ec2Upgrade kernel-defaultUpgrade kernel-ec2-devel | Feb 23, 2017 | Feb 22, 2017 |
| Ubuntu | — | Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-3.13.0-157-powerpc-smpUpgrade linux-image-powerpc64-smpUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-raspi2Upgrade linux-image-4.4.0-75-lowlatencyUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-75-powerpc64-smpUpgrade linux-image-4.4.0-75-powerpc-smpUpgrade linux-image-powerpc64-embUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.10.0-27-lowlatencyUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-awsUpgrade linux-image-4.10.0-27-generic-lpaeUpgrade linux-image-4.4.0-75-generic-lpaeUpgrade linux-image-4.4.0-1012-gkeUpgrade linux-image-3.13.0-157-powerpc-e500Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-1016-awsUpgrade linux-image-3.13.0-157-powerpc-e500mcUpgrade linux-image-4.10.0-27-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-3.13.0-157-genericUpgrade linux-image-lowlatencyUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-1054-raspi2Upgrade linux-image-3.13.0-157-lowlatencyUpgrade linux-image-4.4.0-75-genericUpgrade linux-image-genericUpgrade linux-image-powerpc-smpUpgrade linux-image-3.13.0-157-generic-lpaeUpgrade linux-image-4.4.0-1057-snapdragonUpgrade linux-image-powerpc-e500Upgrade linux-image-generic-lts-xenialUpgrade linux-image-3.13.0-157-powerpc64-embUpgrade linux-image-gkeUpgrade linux-image-4.4.0-75-powerpc-e500mcUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-powerpc-e500mcUpgrade linux-image-3.13.0-157-powerpc64-smp | Jul 1, 2017 | Feb 22, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub