NetSight
IP …
high7.8Public exploit code

CVE-2017-16939

The XFRM dump policy implementation in net/xfrm/xfrm_user.c in the Linux kernel before 4.13.11 allows local users to gain privileges or cause a denial of servi…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The XFRM dump policy implementation in net/xfrm/xfrm_user.c in the Linux kernel before 4.13.11 allows local users to gain privileges or cause a denial of service (use-after-free) via a crafted SO_RCVBUF setsockopt system call in conjunction with XFRM_MSG_GETPOLICY Netlink messages.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.28 before 3.2.97
from 3.3 before 3.16.52
from 3.17 before 3.18.86
from 3.19 before 4.1.48
from 4.2 before 4.4.104
from 4.5 before 4.9.60
DebianDebian Linux
Version 8.0

Weakness classification

CWE-416

References