high7.5
CVE-2017-7618
crypto/ahash.c in the Linux kernel through 4.10.9 allows attackers to cause a denial of service (API operation calling its own callback, and infinite recursion…
Impact
crypto/ahash.c in the Linux kernel through 4.10.9 allows attackers to cause a denial of service (API operation calling its own callback, and infinite recursion) by triggering EBUSY on a full queue.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Linux | Linux Kernel | from 3.15 before 3.16.44 from 3.17 before 3.18.50 from 3.19 before 4.1.40 from 4.2 before 4.4.63 from 4.5 before 4.9.24 from 4.10 before 4.10.12 |
Weakness classification
References
- NVD record
- CVE.org record
- http://marc.info/?l=linux-crypto-vger&m=149181655623850&w=2
- http://www.securityfocus.com/bid/97534
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03800en_us
- http://marc.info/?l=linux-crypto-vger&m=149181655623850&w=2
- http://www.securityfocus.com/bid/97534
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03800en_us