CVE

Id
103167  
CVE No.
CVE-2017-6347  
Status
Candidate  
Description
The ip_cmsg_recv_checksum function in net/ipv4/ip_sockglue.c in the Linux kernel before 4.10.1 has incorrect expectations about skb data layout, which allows local users to cause a denial of service (buffer over-read) or possibly have unspecified other impact via crafted system calls, as demonstrated by use of the MSG_MORE flag in conjunction with loopback UDP transmission.  
Phase
Assigned (20170226)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
806220 103167 CVE-2017-6347 MLIST:[oss-security] 20170228 Linux: ip: fix IP_CHECKSUM handling (CVE-2017-6347)  View
806221 103167 CVE-2017-6347 URL:http://www.openwall.com/lists/oss-security/2017/02/28/5  View
806222 103167 CVE-2017-6347 CONFIRM:http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ca4ef4574f1ee5252e2cd365f8f5d5bafd048f32  View
806223 103167 CVE-2017-6347 CONFIRM:http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.1  View
806224 103167 CVE-2017-6347 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1427984  View
806225 103167 CVE-2017-6347 CONFIRM:https://github.com/torvalds/linux/commit/ca4ef4574f1ee5252e2cd365f8f5d5bafd048f32  View
806226 103167 CVE-2017-6347 BID:96487  View

Related JVN