The ip6gre_err function in net/ipv6/ip6_gre.c in the Linux kernel allows remote attackers to have unspecified impact via vectors involving GRE flags in an IPv6 packet, which trigger an out-of-bounds access.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade kernel | Mar 7, 2017 | Feb 22, 2017 |
| Debian | — | Upgrade linux | Feb 24, 2017 | Feb 22, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debug-develUpgrade perfUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-debugUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-headers | Sep 16, 2021 | Mar 23, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-develUpgrade kernel-toolsUpgrade python-perfUpgrade perfUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel | Nov 19, 2019 | Mar 23, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-perfUpgrade kernel-develUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade perf | Dec 11, 2019 | Mar 23, 2017 |
| Oracle_linux | — | Upgrade kernel-uek | Apr 4, 2017 | Feb 5, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 5, 2017 |
| Suse | — | Upgrade kernel-ec2-develUpgrade kernel-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-docsUpgrade dlm-kmp-defaultUpgrade kernel-ec2Upgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-ec2-extraUpgrade cluster-network-kmp-default | Feb 23, 2017 | Feb 22, 2017 |
| Ubuntu | — | Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-raspi2Upgrade linux-image-4.10.0-27-lowlatencyUpgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-75-generic-lpaeUpgrade linux-image-3.13.0-157-powerpc-e500Upgrade linux-image-3.13.0-157-powerpc-smpUpgrade linux-image-4.4.0-1016-awsUpgrade linux-image-4.10.0-27-generic-lpaeUpgrade linux-image-4.4.0-75-lowlatencyUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-75-powerpc64-smpUpgrade linux-image-4.4.0-1012-gkeUpgrade linux-image-3.13.0-157-powerpc-e500mcUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-awsUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-75-powerpc-smpUpgrade linux-image-4.10.0-27-genericUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-3.13.0-157-powerpc64-embUpgrade linux-image-4.4.0-75-genericUpgrade linux-image-4.4.0-1054-raspi2Upgrade linux-image-powerpc-smpUpgrade linux-image-genericUpgrade linux-image-powerpc-e500Upgrade linux-image-snapdragonUpgrade linux-image-3.13.0-157-genericUpgrade linux-image-gkeUpgrade linux-image-4.4.0-1057-snapdragonUpgrade linux-image-generic-lts-xenialUpgrade linux-image-3.13.0-157-generic-lpaeUpgrade linux-image-3.13.0-157-powerpc64-smpUpgrade linux-image-3.13.0-157-lowlatencyUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-75-powerpc-e500mcUpgrade linux-image-lowlatency-hwe-16.04 | Jul 1, 2017 | Feb 22, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub