Tracker / CVE-2017-18017
CVE-2017-18017
Critical 9.8
The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service (use-after-free and memory corruption) or possibly have unspecified other impact by leveraging the presence of xt_TCPMSS in an iptables action.
Affected products and versions
| arista | eos |
|---|---|
| canonical | ubuntu_linux |
| debian | debian_linux |
| f5 | arx · 6.2.0 → 6.4.0 |
| linux | linux_kernel · 3.11 → 3.16.54 |
| linux | linux_kernel · 3.17 → 3.18.60 |
| linux | linux_kernel · 3.19 → 4.1.43 |
| linux | linux_kernel · 3.2 → 3.2.99 |
| linux | linux_kernel · 3.3 → 3.10.108 |
| linux | linux_kernel · 4.10 → 4.11 |
| linux | linux_kernel · 4.2 → 4.4.76 |
| linux | linux_kernel · 4.5 → 4.9.36 |
| openstack | cloud_magnum_orchestration |
| opensuse | leap |
| redhat | enterprise_linux_desktop |
| redhat | enterprise_linux_eus |
| redhat | enterprise_linux_for_real_time |
| redhat | enterprise_linux_for_real_time_for_nfv |
| redhat | enterprise_linux_server |
| redhat | enterprise_linux_server_aus |
| redhat | enterprise_linux_server_tus |
| redhat | enterprise_linux_workstation |
| redhat | mrg_realtime |
| suse | caas_platform |
| suse | linux_enterprise_debuginfo |
| suse | linux_enterprise_desktop |
| suse | linux_enterprise_high_availability |
| suse | linux_enterprise_high_availability_extension |
| suse | linux_enterprise_live_patching |
| suse | linux_enterprise_module_for_public_cloud |
| suse | linux_enterprise_point_of_sale |
| suse | linux_enterprise_real_time_extension |
| suse | linux_enterprise_server |
| suse | linux_enterprise_software_development_kit |
| suse | linux_enterprise_workstation_extension |
| suse | openstack_cloud |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.