The ip6gre_err function in net/ipv6/ip6_gre.c in the Linux kernel allows remote attackers to have unspecified impact via vectors involving GRE flags in an IPv6 packet, which trigger an out-of-bounds access.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade kernel | Mar 7, 2017 | Feb 22, 2017 |
| Debian | — | Upgrade linux | Feb 24, 2017 | Feb 22, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-debug | Sep 16, 2021 | Mar 23, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade perfUpgrade python-perfUpgrade kernel-develUpgrade kernel-tools | Nov 19, 2019 | Mar 23, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-develUpgrade python-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-headers | Dec 11, 2019 | Mar 23, 2017 |
| Oracle_linux | — | Upgrade kernel-uek | Apr 4, 2017 | Feb 5, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 5, 2017 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-ec2Upgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-ec2-develUpgrade gfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade ocfs2-kmp-defaultUpgrade kernel-ec2-extraUpgrade cluster-network-kmp-default | Feb 23, 2017 | Feb 22, 2017 |
| Ubuntu | — | Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-1012-gkeUpgrade linux-image-powerpc64-smpUpgrade linux-image-3.13.0-157-powerpc-e500mcUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-75-lowlatencyUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-3.13.0-157-powerpc-smpUpgrade linux-image-powerpc64-embUpgrade linux-image-3.13.0-157-powerpc-e500Upgrade linux-image-raspi2Upgrade linux-image-4.10.0-27-genericUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-awsUpgrade linux-image-4.10.0-27-generic-lpaeUpgrade linux-image-4.4.0-75-powerpc-smpUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-75-powerpc64-smpUpgrade linux-image-4.4.0-75-generic-lpaeUpgrade linux-image-4.10.0-27-lowlatencyUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-1016-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-75-powerpc-e500mcUpgrade linux-image-gkeUpgrade linux-image-4.4.0-75-genericUpgrade linux-image-genericUpgrade linux-image-generic-lts-xenialUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-3.13.0-157-lowlatencyUpgrade linux-image-4.4.0-1057-snapdragonUpgrade linux-image-3.13.0-157-generic-lpaeUpgrade linux-image-4.4.0-1054-raspi2Upgrade linux-image-powerpc-e500Upgrade linux-image-powerpc-smpUpgrade linux-image-snapdragonUpgrade linux-image-3.13.0-157-genericUpgrade linux-image-3.13.0-157-powerpc64-embUpgrade linux-image-lowlatencyUpgrade linux-image-3.13.0-157-powerpc64-smp | Jul 1, 2017 | Feb 22, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub