NetSight
IP …
high7.8Public exploit code

CVE-2017-8824

The dccp_disconnect function in net/dccp/proto.c in the Linux kernel through 4.14.3 allows local users to gain privileges or cause a denial of service (use-aft…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The dccp_disconnect function in net/dccp/proto.c in the Linux kernel through 4.14.3 allows local users to gain privileges or cause a denial of service (use-after-free) via an AF_UNSPEC connect system call during the DCCP_LISTEN state.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.14 before 3.2.97
from 3.3 before 3.16.52
from 3.17 before 3.18.95
from 3.19 before 4.1.50
from 4.2 before 4.4.116
from 4.5 before 4.9.82

Weakness classification

CWE-416

References