NetSight
IP …
high7.8Public exploit code

CVE-2017-7308

The packet_set_ring function in net/packet/af_packet.c in the Linux kernel through 4.10.6 does not properly validate certain block-size data, which allows loca…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The packet_set_ring function in net/packet/af_packet.c in the Linux kernel through 4.10.6 does not properly validate certain block-size data, which allows local users to cause a denial of service (integer signedness error and out-of-bounds write), or gain privileges (if the CAP_NET_RAW capability is held), via crafted system calls.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.27 before 3.2.89
from 3.3 before 3.10.107
from 3.11 before 3.12.74
from 3.13 before 3.16.44
from 3.17 before 3.18.52
from 3.19 before 4.1.41

Weakness classification

CWE-681CWE-787

References