CVE-2017-11600

low-risk

Published 2017-07-24

net/xfrm/xfrm_policy.c in the Linux kernel through 4.12.3, when CONFIG_XFRM_MIGRATE is enabled, does not ensure that the dir value of xfrm_userpolicy_id is XFRM_POLICY_MAX or less, which allows local users to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via an XFRM_MSG_MIGRATE xfrm Netlink message.

Do I need to act?

0.07% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 7.0/10 High

LOCAL / HIGH complexity

Affected Products (1)

Linux Kernel

Affected Vendors

Linux

References (18)

Mailing List http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html

Mailing List http://seclists.org/bugtraq/2017/Jul/30

Third Party Advisory http://www.debian.org/security/2017/dsa-3981

Third Party Advisory http://www.securityfocus.com/bid/99928

Third Party Advisory https://access.redhat.com/errata/RHSA-2018:1965

Third Party Advisory https://access.redhat.com/errata/RHSA-2018:2003

Third Party Advisory https://access.redhat.com/errata/RHSA-2019:1170

Third Party Advisory https://access.redhat.com/errata/RHSA-2019:1190

Third Party Advisory https://source.android.com/security/bulletin/pixel/2017-11-01