CVE-2017-13715

Critical

Published: 29/08/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The __skb_flow_dissect function in the Linux kernel before version 4.3 does not ensure initialization of n_proto, ip_proto, and thoff, allowing remote attackers to cause a denial of service (system crash) or possibly execute arbitrary code via a single crafted MPLS packet.

Risk Assessment

This vulnerability can lead to system crashes, affecting the availability of services within the organization. There is also a risk of arbitrary code execution, which could result in serious security breaches.

Recommendation

It is recommended to update the Linux kernel to version 4.3 or later to mitigate this vulnerability. Additionally, monitoring network traffic for potential attacks exploiting this flaw is advised.

Original NVD description (English source)

The __skb_flow_dissect function in net/core/flow_dissector.c in the Linux kernel before 4.3 does not ensure that n_proto, ip_proto, and thoff are initialized, which allows remote attackers to cause a denial of service (system crash) or possibly execute arbitrary code via a single crafted MPLS packet.