NetSight
IP …
high7.8

CVE-2017-17805

The Salsa20 encryption algorithm in the Linux kernel before 4.14.8 does not correctly handle zero-length inputs, allowing a local attacker able to use the AF_A…

Impact

The Salsa20 encryption algorithm in the Linux kernel before 4.14.8 does not correctly handle zero-length inputs, allowing a local attacker able to use the AF_ALG-based skcipher interface (CONFIG_CRYPTO_USER_API_SKCIPHER) to cause a denial of service (uninitialized-memory free and kernel crash) or have unspecified other impact by executing a crafted sequence of system calls that use the blkcipher_walk API. Both the generic implementation (crypto/salsa20_generic.c) and x86 implementation (arch/x86/crypto/salsa20_glue.c) of Salsa20 were vulnerable.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.25 before 3.2.97
from 3.3 before 3.16.52
from 3.17 before 3.18.89
from 3.19 before 4.1.49
from 4.2 before 4.4.107
from 4.5 before 4.9.71
DebianDebian Linux
Versions 8.0, 9.0
OpensuseLeap
Version 42.2
Opensuse ProjectLeap
Version 42.3
SuseLinux Enterprise Desktop
Version 12
SuseLinux Enterprise Server
Versions 11, 12
SuseLinux Enterprise Server For Raspberry Pi
Version 12
CanonicalUbuntu Linux
Versions 12.04, 14.04, 16.04, 17.10

Weakness classification

CWE-20

References