CVE-2017-7184

High

Published: 19/03/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The xfrm_replay_verify_len function in the Linux kernel through version 4.10.6 does not validate certain size data after an XFRM_MSG_NEWAE update, allowing local users to obtain root privileges or cause a denial of service through heap-based out-of-bounds access.

Risk Assessment

This vulnerability may lead to privilege escalation or system crashes, posing a significant security threat to the organization.

Recommendation

It is recommended to update the Linux kernel to a version that includes fixes for this vulnerability to minimize the risk of unauthorized access and system failures.

Other vulnerabilities in Linux kernel (do wersji 4.10.6)

CVE-2017-7294High
The vmw_surface_define_ioctl function in the Linux kernel up to version 4.10.6 does not validate the addition of certain levels data, allowing local users to trigger an integer overflow and out-of-bounds write. This can lead to system hang or crash, and potentially privilege escalation.

Original NVD description (English source)

The xfrm_replay_verify_len function in net/xfrm/xfrm_user.c in the Linux kernel through 4.10.6 does not validate certain size data after an XFRM_MSG_NEWAE update, which allows local users to obtain root privileges or cause a denial of service (heap-based out-of-bounds access) by leveraging the CAP_NET_ADMIN capability, as demonstrated during a Pwn2Own competition at CanSecWest 2017 for the Ubuntu 16.10 linux-image-* package 4.8.0.41.52.