CVE-2017-16939 in Kernel
Summary
The XFRM dump policy implementation in net/xfrm/xfrm_user.c in the Linux kernel before 4.13.11 allows local users to gain privileges or cause a denial of service (use-after-free) via a crafted SO_RCVBUF setsockopt system call in conjunction with XFRM_MSG_GETPOLICY Netlink messages.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Reservation
11/24/2017
Disclosure
11/24/2017
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 109965 | Linux Kernel XFRM Dump Policy xfrm_user.c access control | 264 | Proof-of-Concept | Official fix | CVE-2017-16939 |