NetSight
IP …
high7.8

CVE-2017-15115

The sctp_do_peeloff function in net/sctp/socket.c in the Linux kernel before 4.14 does not check whether the intended netns is used in a peel-off action, which…

Impact

The sctp_do_peeloff function in net/sctp/socket.c in the Linux kernel before 4.14 does not check whether the intended netns is used in a peel-off action, which allows local users to cause a denial of service (use-after-free and system crash) or possibly have unspecified other impact via crafted system calls.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 3.2.96
from 3.3 before 3.16.51
from 3.17 before 3.18.84
from 3.19 before 4.1.47
from 4.2 before 4.4.100
from 4.5 before 4.9.65
DebianDebian Linux
Version 7.0
SuseLinux Enterprise Server
Version 11
CanonicalUbuntu Linux
Versions 12.04, 14.04, 16.04, 17.10

Weakness classification

CWE-416

References