NetSight
IP …
critical9.8

CVE-2017-18017

The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a den…

Impact

The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service (use-after-free and memory corruption) or possibly have unspecified other impact by leveraging the presence of xt_TCPMSS in an iptables action.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 3.2 before 3.2.99
from 3.3 before 3.10.108
from 3.11 before 3.16.54
from 3.17 before 3.18.60
from 3.19 before 4.1.43
from 4.2 before 4.4.76
DebianDebian Linux
Versions 7.0, 8.0
AristaEos
Version 4.20.1fx-virtual-router
F5Arx
from 6.2.0 through 6.4.0
SuseCaas Platform
All versions
SuseLinux Enterprise Debuginfo
Version 11
SuseLinux Enterprise Module For Public Cloud
Version 12
SuseLinux Enterprise Point Of Sale
Version 11
SuseOpenstack Cloud
Version 6
OpensuseLeap
Version 42.3
SuseLinux Enterprise Desktop
Version 12
SuseLinux Enterprise High Availability
Version 12

Weakness classification

CWE-416

References