The tcpspliceread function in net/ipv4/tcp.c in the Linux kernel before 4.9.11 allows remote attackers to cause a denial of service (infinite loop and soft lockup) via vectors involving a TCP packet with the URG flag.
[
{
"target": {
"file": "net/ipv4/tcp.c"
},
"id": "CVE-2017-6214-ace0e6fd",
"deprecated": false,
"digest": {
"line_hashes": [
"20811159754537172463882316042578672234",
"111559793793392519150647242327430668357",
"71337077081148103549212716127228890993",
"60571574334291696577845722619389943806"
],
"threshold": 0.9
},
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@ccf7abb93af09ad0868ae9033d1ca8108bdaec82",
"signature_version": "v1"
},
{
"target": {
"function": "tcp_splice_read",
"file": "net/ipv4/tcp.c"
},
"id": "CVE-2017-6214-dc478722",
"deprecated": false,
"digest": {
"length": 1213.0,
"function_hash": "73488605508690884302850942203821358767"
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@ccf7abb93af09ad0868ae9033d1ca8108bdaec82",
"signature_version": "v1"
}
]
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-6214.json"
[
{
"target": {
"file": "net/ipv4/tcp.c"
},
"id": "CVE-2017-6214-5537d379",
"deprecated": false,
"digest": {
"line_hashes": [
"20811159754537172463882316042578672234",
"111559793793392519150647242327430668357",
"71337077081148103549212716127228890993",
"60571574334291696577845722619389943806"
],
"threshold": 0.9
},
"signature_type": "Line",
"source": "https://github.com/torvalds/linux/commit/ccf7abb93af09ad0868ae9033d1ca8108bdaec82",
"signature_version": "v1"
},
{
"target": {
"function": "tcp_splice_read",
"file": "net/ipv4/tcp.c"
},
"id": "CVE-2017-6214-978a2ed1",
"deprecated": false,
"digest": {
"length": 1213.0,
"function_hash": "73488605508690884302850942203821358767"
},
"signature_type": "Function",
"source": "https://github.com/torvalds/linux/commit/ccf7abb93af09ad0868ae9033d1ca8108bdaec82",
"signature_version": "v1"
}
]
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-6214.json"