CVE-2017-2671 in Linux Kernel
Zusammenfassung (Englisch)
The ping_unhash function in net/ipv4/ping.c in the Linux kernel through 4.10.8 is too late in obtaining a certain lock and consequently cannot ensure that disconnect function calls are safe, which allows local users to cause a denial of service (panic) by leveraging access to the protocol value of IPPROTO_ICMP in a socket system call.
Reservieren
01.12.2016
Veröffentlichung
05.04.2017
Einträge
VulDB provides additional information and datapoints for this CVE:
| ID | Schwachstelle | CWE | Aus | Mas | CVE |
|---|---|---|---|---|---|
| 99320 | Linux Kernel ping.c disconnect Panic erweiterte Rechte | 284 | High | Offizieller Fix | CVE-2017-2671 |