The tcpdisconnect function in net/ipv4/tcp.c in the Linux kernel before 4.12 allows local users to cause a denial of service (tcpselectwindow divide-by-zero error and system crash) by triggering a disconnect within a certain tcprecvmsg code path.
[
{
"id": "CVE-2017-14106-0b0fafaa",
"deprecated": false,
"digest": {
"line_hashes": [
"208814673350890861875146705840727718809",
"42024981047896794773493419061148654302",
"54662604567128426702924758263919031597",
"36935363941798457689075068990581176784"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "net/ipv4/tcp.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@499350a5a6e7512d9ed369ed63a4244b6536f4f8",
"signature_type": "Line"
},
{
"id": "CVE-2017-14106-8c810e72",
"deprecated": false,
"digest": {
"function_hash": "336062958617397182625012338180495840600",
"length": 1621.0
},
"signature_version": "v1",
"target": {
"function": "tcp_disconnect",
"file": "net/ipv4/tcp.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@499350a5a6e7512d9ed369ed63a4244b6536f4f8",
"signature_type": "Function"
}
]
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-14106.json"
[
{
"id": "CVE-2017-14106-b9511272",
"deprecated": false,
"digest": {
"function_hash": "336062958617397182625012338180495840600",
"length": 1621.0
},
"signature_version": "v1",
"target": {
"function": "tcp_disconnect",
"file": "net/ipv4/tcp.c"
},
"source": "https://github.com/torvalds/linux/commit/499350a5a6e7512d9ed369ed63a4244b6536f4f8",
"signature_type": "Function"
},
{
"id": "CVE-2017-14106-bbc710db",
"deprecated": false,
"digest": {
"line_hashes": [
"208814673350890861875146705840727718809",
"42024981047896794773493419061148654302",
"54662604567128426702924758263919031597",
"36935363941798457689075068990581176784"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "net/ipv4/tcp.c"
},
"source": "https://github.com/torvalds/linux/commit/499350a5a6e7512d9ed369ed63a4244b6536f4f8",
"signature_type": "Line"
}
]
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-14106.json"