CVE-2017-5897

Critical

Published: 23/03/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The ip6gre_err function in the Linux kernel allows remote attackers to have unspecified impact via vectors involving GRE flags in an IPv6 packet, leading to out-of-bounds access.

Risk Assessment

Attackers may exploit this vulnerability to conduct attacks that could destabilize the system or gain unauthorized access.

Recommendation

It is recommended to update the Linux kernel to the latest version to mitigate the risks associated with this vulnerability.

Original NVD description (English source)

The ip6gre_err function in net/ipv6/ip6_gre.c in the Linux kernel allows remote attackers to have unspecified impact via vectors involving GRE flags in an IPv6 packet, which trigger an out-of-bounds access.