vulnwire
9.8crit

CVE-2017-18017in critical feed

The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote atta…

Published 8 y ago · modified 4 mo ago · JSON

CVSS
9.8
v3.1 · NVD
CISA KEV
No
not known exploited
EPSS
52.8%
percentile 99%
Public exploits
0
none known

The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service (use-after-free and memory corruption) or possibly have unspecified other impact by leveraging the presence of xt_TCPMSS in an iptables action.

Exploit prediction (EPSS)

52.84% probability of exploitation in the next 30 days, higher than 99% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD3.19.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD2.010.0AV:N/AC:L/Au:N/C:C/I:C/A:C

Classification

Weakness
Technology feeds
Linux kernel (RSS, critical only)

References

  • debian.org /security/2018/dsa-4187 · vendor-advisory, x_refsource_DEBIAN, x_transferred
  • usn.ubuntu.com /3583-2/ · vendor-advisory, x_refsource_UBUNTU, x_transferred
  • patchwork.ozlabs.org /patch/746618/ · x_refsource_MISC, x_transferred
  • access.redhat.com /errata/RHSA-2018:1737 · vendor-advisory, x_refsource_REDHAT, x_transferred
  • kernel.org /pub/linux/kernel/v4.x/ChangeLog-4.9.36 · x_refsource_MISC, x_transferred
  • lkml.org /lkml/2017/4/2/13 · x_refsource_MISC, x_transferred
  • access.redhat.com /errata/RHSA-2018:1062 · vendor-advisory, x_refsource_REDHAT, x_transferred
  • access.redhat.com /errata/RHSA-2018:1319 · vendor-advisory, x_refsource_REDHAT, x_transferred
  • help.ecostruxureit.com /display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0 · x_refsource_CONFIRM, x_transferred
  • usn.ubuntu.com /3583-1/ · vendor-advisory, x_refsource_UBUNTU, x_transferred
  • access.redhat.com /errata/RHSA-2018:0676 · vendor-advisory, x_refsource_REDHAT, x_transferred
  • bugs.launchpad.net /ubuntu/+source/linux/+bug/1739765 · x_refsource_MISC, x_transferred
  • github.com /torvalds/linux/commit/2638fd0f92d4397884fd991d8f4925cb3f081901 · x_refsource_MISC, x_transferred
  • access.redhat.com /errata/RHSA-2018:1170 · vendor-advisory, x_refsource_REDHAT, x_transferred
  • git.kernel.org /cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2638fd0f92d4397884fd991d8f4925cb3f081 · x_refsource_MISC, x_transferred
  • access.redhat.com /errata/RHSA-2018:1130 · vendor-advisory, x_refsource_REDHAT, x_transferred
  • lists.debian.org /debian-lts-announce/2018/05/msg00000.html · mailing-list, x_refsource_MLIST, x_transferred
  • securityfocus.com /bid/102367 · vdb-entry, x_refsource_BID, x_transferred
  • lists.opensuse.org /opensuse-security-announce/2018-03/msg00067.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • lists.opensuse.org /opensuse-security-announce/2018-03/msg00072.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • lists.opensuse.org /opensuse-security-announce/2018-02/msg00008.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • ubuntu.com /usn/USN-3583-1 · vendor-advisory, x_refsource_UBUNTU, x_transferred
  • support.f5.com /csp/article/K18352029 · x_refsource_CONFIRM, x_transferred
  • lists.opensuse.org /opensuse-security-announce/2018-02/msg00047.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • lists.opensuse.org /opensuse-security-announce/2018-02/msg00013.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • lists.opensuse.org /opensuse-security-announce/2018-04/msg00014.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • lists.opensuse.org /opensuse-security-announce/2018-02/msg00015.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • lists.opensuse.org /opensuse-security-announce/2018-02/msg00038.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • lists.opensuse.org /opensuse-security-announce/2018-03/msg00070.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • ubuntu.com /usn/USN-3583-2 · vendor-advisory, x_refsource_UBUNTU, x_transferred
  • lists.opensuse.org /opensuse-security-announce/2018-03/msg00030.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • arista.com /en/support/advisories-notices/security-advisories/4577-security-advisory-34 · x_refsource_MISC, x_transferred
  • security.netapp.com /advisory/ntap-20250103-0010/

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.