CVE-2017-1000111
See a problem?- Source
- https://nvd.nist.gov/vuln/detail/CVE-2017-1000111
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-1000111.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2017-1000111
- Related
- Published
- 2017-10-05T01:29:04Z
- Modified
- 2024-09-11T02:00:06Z
- Severity
-
- 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
Linux kernel: heap out-of-bounds in AFPACKET sockets. This new issue is analogous to previously disclosed CVE-2016-8655. In both cases, a socket option that changes socket state may race with safety checks in packetsetring. Previously with PACKETVERSION. This time with PACKETRESERVE. The solution is similar: lock the socket for the update. This issue may be exploitable, we did not investigate further. As this issue affects PFPACKET sockets, it requires CAPNETRAW in the process namespace. But note that with user namespaces enabled, any process can create a namespace in which it has CAPNETRAW.
- References
-
- http://www.debian.org/security/2017/dsa-3981
- http://www.securityfocus.com/bid/100267
- http://www.securitytracker.com/id/1039132
- https://access.redhat.com/errata/RHSA-2017:2918
- https://access.redhat.com/errata/RHSA-2017:2930
- https://access.redhat.com/errata/RHSA-2017:2931
- https://access.redhat.com/errata/RHSA-2017:3200
- https://access.redhat.com/security/cve/cve-2017-1000111
- https://security-tracker.debian.org/tracker/CVE-2017-1000111
Affected packages
Debian:11 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source
Debian:12 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source
Debian:13 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source