| ID |
CVE-2017-7184
|
| Summary |
The xfrm_replay_verify_len function in net/xfrm/xfrm_user.c in the Linux kernel through 4.10.6 does not validate certain size data after an XFRM_MSG_NEWAE update, which allows local users to obtain root privileges or cause a denial of service (heap-based out-of-bounds access) by leveraging the CAP_NET_ADMIN capability, as demonstrated during a Pwn2Own competition at CanSecWest 2017 for the Ubuntu 16.10 linux-image-* package 4.8.0.41.52. |
| References |
|
| Vulnerable Configurations |
|
| CVSS |
| Base: | 7.2 (as of 03-10-2019 - 00:03) |
| Impact: | |
| Exploitability: | |
|
| CWE |
NVD-CWE-noinfo |
| CAPEC |
|
| Access |
| Vector | Complexity | Authentication |
| LOCAL |
LOW |
NONE |
|
| Impact |
| Confidentiality | Integrity | Availability |
| COMPLETE |
COMPLETE |
COMPLETE |
|
| cvss-vector
via4
|
AV:L/AC:L/Au:N/C:C/I:C/A:C
|
| redhat
via4
|
| advisories | | | rpms | - kernel-0:3.10.0-693.5.2.el7
- kernel-abi-whitelists-0:3.10.0-693.5.2.el7
- kernel-bootwrapper-0:3.10.0-693.5.2.el7
- kernel-debug-0:3.10.0-693.5.2.el7
- kernel-debug-devel-0:3.10.0-693.5.2.el7
- kernel-devel-0:3.10.0-693.5.2.el7
- kernel-doc-0:3.10.0-693.5.2.el7
- kernel-headers-0:3.10.0-693.5.2.el7
- kernel-kdump-0:3.10.0-693.5.2.el7
- kernel-kdump-devel-0:3.10.0-693.5.2.el7
- kernel-tools-0:3.10.0-693.5.2.el7
- kernel-tools-libs-0:3.10.0-693.5.2.el7
- kernel-tools-libs-devel-0:3.10.0-693.5.2.el7
- perf-0:3.10.0-693.5.2.el7
- python-perf-0:3.10.0-693.5.2.el7
- kernel-rt-0:3.10.0-693.5.2.rt56.626.el7
- kernel-rt-debug-0:3.10.0-693.5.2.rt56.626.el7
- kernel-rt-debug-devel-0:3.10.0-693.5.2.rt56.626.el7
- kernel-rt-debug-kvm-0:3.10.0-693.5.2.rt56.626.el7
- kernel-rt-devel-0:3.10.0-693.5.2.rt56.626.el7
- kernel-rt-doc-0:3.10.0-693.5.2.rt56.626.el7
- kernel-rt-kvm-0:3.10.0-693.5.2.rt56.626.el7
- kernel-rt-trace-0:3.10.0-693.5.2.rt56.626.el7
- kernel-rt-trace-devel-0:3.10.0-693.5.2.rt56.626.el7
- kernel-rt-trace-kvm-0:3.10.0-693.5.2.rt56.626.el7
|
|
| refmap
via4
|
| bid | 97018 | | confirm | | | misc | | | sectrack | 1038166 |
|
| Last major update |
03-10-2019 - 00:03 |
| Published |
19-03-2017 - 18:59 |
