NVD

Id
86198  
Name
CVE-2017-9074  
Description
The IPv6 fragmentation implementation in the Linux kernel through 4.11.1 does not consider that the nexthdr field may be associated with an invalid option, which allows local users to cause a denial of service (out-of-bounds read and BUG) or possibly have unspecified other impact via crafted socket and send system calls.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-06-03  
Published
2017-05-19  
Modified Date
2017-06-01  
Seq
2017-9074  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
419097 86198 CVE-2017-7184 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=677e806da4d916052585301785d847c3b3e6186a  View
419098 86198 CVE-2017-7184 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f843ee6dd019bcece3e74e76ad9df0155655d0df  View
419099 86198 CVE-2017-7184 http://openwall.com/lists/oss-security/2017/03/29/2  View
419100 86198 CVE-2017-7184 https://github.com/torvalds/linux/commit/677e806da4d916052585301785d847c3b3e6186a  View
419101 86198 CVE-2017-7184 https://github.com/torvalds/linux/commit/f843ee6dd019bcece3e74e76ad9df0155655d0df  View
422886 86198 CVE-2017-0627 98205  View
422887 86198 CVE-2017-0627 https://source.android.com/security/bulletin/2017-05-01  View
422888 86198 CVE-2017-0627 98205  View
422889 86198 CVE-2017-0627 https://source.android.com/security/bulletin/2017-05-01  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
68012 JVNDB-2017-004294 Linux Kernel の IPv6 断片化の実装におけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の IPv6 断片化 (fragmentation) の実装は、nexthdr フィールドが不正なオプションに関連付けられている可能性を考慮しないため、サービス運用妨害 (境界外読み取りおよびバグ) 状態にされるなど、不特定の影響を受ける脆弱性が存在します。 CVE-2017-9074 0 CVE-2017-9074 86198 7.2 7.8 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-004294.html 2017-05-16 2017-06-21 View