CVE-2017-6074 in Communications

Resumen (Inglés)

The dccp_rcv_state_process function in net/dccp/input.c in the Linux kernel through 4.9.11 mishandles DCCP_PKT_REQUEST packet data structures in the LISTEN state, which allows local users to obtain root privileges or cause a denial of service (double free) via an application that makes an IPV6_RECVPKTINFO setsockopt system call.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservar

2017-02-17

Divulgación

2017-02-17

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
121575	Oracle Communications Session Border Controller desbordamiento de búfer	415	Prueba de concepto	Arreglo oficial	CVE-2017-6074
97118	Linux Kernel input.c dccp_rcv_state_process libre desbordamiento de búfer	416	Prueba de concepto	Arreglo oficial	CVE-2017-6074

Fuentes

• MITRE
• NVD
• CVE Details