The __ip6_append_data function in net/ipv6/ip6_output.c in the Linux kernel through 4.11.3 is too late in checking whether an overwrite of an skb data structure may occur, which allows local users to cause a denial of service (system crash) via crafted system calls.
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade kernel | Jun 23, 2017 | May 26, 2017 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 28, 2019 | May 27, 2017 |
| Debian | — | Upgrade linux | Jun 20, 2017 | May 26, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade perfUpgrade kernel-develUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-debugUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-tools-libs | Nov 30, 2017 | May 26, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-perfUpgrade kernel-develUpgrade perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headers | Nov 30, 2017 | May 26, 2017 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Aug 17, 2017 | May 19, 2017 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 3, 2017 | May 26, 2017 |
| Suse | — | Upgrade kernel-ec2Upgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-ec2-develUpgrade ocfs2-kmp-defaultUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade kernel-ec2-extraUpgrade kernel-docsUpgrade cluster-network-kmp-default | Jun 22, 2017 | May 26, 2017 |
| Ubuntu | — | Upgrade linux-image-4.4.0-83-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-3.13.0-123-generic-lpaeUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.8.0-58-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-3.13.0-123-powerpc64-embUpgrade linux-image-awsUpgrade linux-image-powerpc64-embUpgrade linux-image-3.13.0-123-genericUpgrade linux-image-4.8.0-58-powerpc-e500mcUpgrade linux-image-3.13.0-123-powerpc64-smpUpgrade linux-image-4.4.0-1022-awsUpgrade linux-image-powerpc-e500Upgrade linux-image-3.13.0-123-powerpc-e500mcUpgrade linux-image-4.4.0-83-generic-lpaeUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-4.4.0-1018-gkeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-3.13.0-123-powerpc-e500Upgrade linux-image-4.4.0-1061-raspi2Upgrade linux-image-4.4.0-83-powerpc-smpUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-3.13.0-123-powerpc-smpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-powerpc-e500mcUpgrade linux-image-4.10.0-26-generic-lpaeUpgrade linux-image-4.8.0-58-powerpc64-embUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-generic-lpaeUpgrade linux-image-4.10.0-26-genericUpgrade linux-image-4.10.0-26-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-1063-snapdragonUpgrade linux-image-genericUpgrade linux-image-4.4.0-83-powerpc64-embUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.8.0-58-genericUpgrade linux-image-4.4.0-83-genericUpgrade linux-image-powerpc-smpUpgrade linux-image-4.10.0-1010-raspi2Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-generic-lts-trustyUpgrade linux-image-4.8.0-1042-raspi2Upgrade linux-image-4.8.0-58-powerpc-smpUpgrade linux-image-4.4.0-83-powerpc-e500mcUpgrade linux-image-3.13.0-123-lowlatencyUpgrade linux-image-4.8.0-58-lowlatencyUpgrade linux-image-4.4.0-83-powerpc64-smpUpgrade linux-image-gkeUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-snapdragon | Jun 20, 2017 | May 26, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 27, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub