CVE-2017-6074
CVE-2017-6074
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
The dccp_rcv_state_process function in net/dccp/input.c in the Linux kernel through 4.9.11 mishandles DCCP_PKT_REQUEST packet data structures in the LISTEN state, which allows local users to obtain root privileges or cause a denial of service (double free) via an application that makes an IPV6_RECVPKTINFO setsockopt system call.
CVSS 7.8 · High · EPSS 6.0% · Public exploit · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
linux Debian:12
- Affected ranges
- ECOSYSTEM: < 4.9.13-1
Update to 4.9.13-1
linux Debian:13
- Affected ranges
- ECOSYSTEM: < 4.9.13-1
Update to 4.9.13-1
linux Debian:14
- Affected ranges
- ECOSYSTEM: < 4.9.13-1
Update to 4.9.13-1
linux Ubuntu:14.04:LTS
- Versions
- 3.11.0-12.19
- 3.12.0-1.3
- 3.12.0-2.5
- 3.12.0-2.7
- 3.12.0-3.8
- 3.12.0-3.9
- 3.12.0-4.10
- 3.12.0-4.12
- 3.12.0-5.13
- 3.12.0-7.15
- 3.13.0-1.16
- 3.13.0-2.17
- 3.13.0-3.18
- 3.13.0-4.19
- 3.13.0-5.20
- 3.13.0-6.23
- 3.13.0-7.25
- 3.13.0-7.26
- 3.13.0-8.27
- 3.13.0-8.28
- 3.13.0-10.30
- 3.13.0-11.31
- 3.13.0-12.32
- 3.13.0-13.33
- 3.13.0-14.34
- 3.13.0-15.35
- 3.13.0-16.36
- 3.13.0-17.37
- 3.13.0-18.38
- 3.13.0-19.39
- 3.13.0-19.40
- 3.13.0-20.42
- 3.13.0-21.43
- 3.13.0-22.44
- 3.13.0-23.45
- 3.13.0-24.46
- 3.13.0-24.47
- 3.13.0-27.50
- 3.13.0-29.53
- 3.13.0-30.54
- 3.13.0-30.55
- 3.13.0-32.57
- 3.13.0-33.58
- 3.13.0-34.60
- 3.13.0-35.62
- 3.13.0-36.63
- 3.13.0-37.64
- 3.13.0-39.66
- 3.13.0-40.69
- 3.13.0-41.70
- 3.13.0-43.72
- 3.13.0-44.73
- 3.13.0-45.74
- 3.13.0-46.75
- 3.13.0-46.76
- 3.13.0-46.77
- 3.13.0-46.79
- 3.13.0-48.80
- 3.13.0-49.81
- 3.13.0-49.83
- 3.13.0-51.84
- 3.13.0-52.85
- 3.13.0-52.86
- 3.13.0-53.88
- 3.13.0-53.89
- 3.13.0-54.91
- 3.13.0-55.92
- 3.13.0-55.94
- 3.13.0-57.95
- 3.13.0-58.97
- 3.13.0-59.98
- 3.13.0-61.100
- 3.13.0-62.102
- 3.13.0-63.103
- 3.13.0-65.105
- 3.13.0-65.106
- 3.13.0-66.108
- 3.13.0-67.110
- 3.13.0-68.111
- 3.13.0-70.113
- 3.13.0-71.114
- 3.13.0-73.116
- 3.13.0-74.118
- 3.13.0-76.120
- 3.13.0-77.121
- 3.13.0-79.123
- 3.13.0-83.127
- 3.13.0-85.129
- 3.13.0-86.130
- 3.13.0-86.131
- 3.13.0-87.133
- 3.13.0-88.135
- 3.13.0-91.138
- 3.13.0-92.139
- 3.13.0-93.140
- 3.13.0-95.142
- 3.13.0-96.143
- 3.13.0-98.145
- 3.13.0-100.147
- 3.13.0-101.148
- 3.13.0-103.150
- 3.13.0-105.152
- 3.13.0-106.153
- 3.13.0-107.154
- 3.13.0-108.155
- 3.13.0-109.156
- Affected ranges
- ECOSYSTEM: < 3.13.0-110.157
Update to 3.13.0-110.157
linux-lts-xenial Ubuntu:14.04:LTS
- Versions
- 4.4.0-13.29~14.04.1
- 4.4.0-14.30~14.04.2
- 4.4.0-15.31~14.04.1
- 4.4.0-18.34~14.04.1
- 4.4.0-21.37~14.04.1
- 4.4.0-22.39~14.04.1
- 4.4.0-22.40~14.04.1
- 4.4.0-24.43~14.04.1
- 4.4.0-28.47~14.04.1
- 4.4.0-31.50~14.04.1
- 4.4.0-34.53~14.04.1
- 4.4.0-36.55~14.04.1
- 4.4.0-38.57~14.04.1
- 4.4.0-42.62~14.04.1
- 4.4.0-45.66~14.04.1
- 4.4.0-47.68~14.04.1
- 4.4.0-51.72~14.04.1
- 4.4.0-53.74~14.04.1
- 4.4.0-57.78~14.04.1
- 4.4.0-59.80~14.04.1
- 4.4.0-62.83~14.04.1
- 4.4.0-63.84~14.04.2
- Affected ranges
- ECOSYSTEM: < 4.4.0-64.85~14.04.1
Update to 4.4.0-64.85~14.04.1
linux Ubuntu:16.04:LTS
- Versions
- 4.2.0-16.19
- 4.2.0-17.21
- 4.2.0-19.23
- 4.3.0-1.10
- 4.3.0-2.11
- 4.3.0-5.16
- 4.3.0-6.17
- 4.3.0-7.18
- 4.4.0-2.16
- 4.4.0-4.19
- 4.4.0-6.21
- 4.4.0-7.22
- 4.4.0-8.23
- 4.4.0-9.24
- 4.4.0-10.25
- 4.4.0-11.26
- 4.4.0-12.28
- 4.4.0-13.29
- 4.4.0-14.30
- 4.4.0-15.31
- 4.4.0-16.32
- 4.4.0-17.33
- 4.4.0-18.34
- 4.4.0-21.37
- 4.4.0-22.39
- 4.4.0-22.40
- 4.4.0-24.43
- 4.4.0-28.47
- 4.4.0-31.50
- 4.4.0-34.53
- 4.4.0-36.55
- 4.4.0-38.57
- 4.4.0-42.62
- 4.4.0-43.63
- 4.4.0-45.66
- 4.4.0-47.68
- 4.4.0-51.72
- 4.4.0-53.74
- 4.4.0-57.78
- 4.4.0-59.80
- 4.4.0-62.83
- 4.4.0-63.84
- Affected ranges
- ECOSYSTEM: < 4.4.0-64.85
Update to 4.4.0-64.85
linux-aws Ubuntu:16.04:LTS
- Versions
- 4.4.0-1001.10
- 4.4.0-1003.12
- Affected ranges
- ECOSYSTEM: < 4.4.0-1004.13
Update to 4.4.0-1004.13
linux-euclid Ubuntu:16.04:LTS
- Versions
- 4.4.0-9019.20
- 4.4.0-9020.21
- 4.4.0-9021.22
- 4.4.0-9022.23
- 4.4.0-9023.24
- 4.4.0-9025.27
- 4.4.0-9026.28
- 4.4.0-9027.29
- 4.4.0-9028.30
- Affected ranges
- ECOSYSTEM: < 4.4.0-9029.31
Update to 4.4.0-9029.31
linux-hwe Ubuntu:16.04:LTS
- Versions
- 4.8.0-36.36~16.04.1
- Affected ranges
- ECOSYSTEM: < 4.8.0-39.42~16.04.1
Update to 4.8.0-39.42~16.04.1
linux-raspi2 Ubuntu:16.04:LTS
- Versions
- 4.2.0-1013.19
- 4.2.0-1014.21
- 4.3.0-1006.6
- 4.4.0-1003.4
- 4.4.0-1004.5
- 4.4.0-1009.10
- 4.4.0-1010.12
- 4.4.0-1010.13
- 4.4.0-1012.16
- 4.4.0-1016.22
- 4.4.0-1017.23
- 4.4.0-1019.25
- 4.4.0-1021.27
- 4.4.0-1023.29
- 4.4.0-1027.33
- 4.4.0-1029.36
- 4.4.0-1034.41
- 4.4.0-1038.45
- 4.4.0-1040.47
- 4.4.0-1042.49
- Affected ranges
- ECOSYSTEM: < 4.4.0-1044.51
Update to 4.4.0-1044.51
linux-snapdragon Ubuntu:16.04:LTS
- Versions
- 4.4.0-1012.12
- 4.4.0-1013.14
- 4.4.0-1013.15
- 4.4.0-1015.18
- 4.4.0-1019.22
- 4.4.0-1020.23
- 4.4.0-1022.25
- 4.4.0-1024.27
- 4.4.0-1026.29
- 4.4.0-1030.33
- 4.4.0-1032.36
- 4.4.0-1035.39
- 4.4.0-1039.43
- 4.4.0-1042.46
- 4.4.0-1044.48
- 4.4.0-1046.50
- 4.4.0-1047.51
- Affected ranges
- ECOSYSTEM: < 4.4.0-1048.52
Update to 4.4.0-1048.52
Original sources
- http://rhn.redhat.com/errata/RHSA-2017-0323.html
- http://rhn.redhat.com/errata/RHSA-2017-0324.html
- http://rhn.redhat.com/errata/RHSA-2017-0365.html
- http://rhn.redhat.com/errata/RHSA-2017-0347.html
- http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html
- https://access.redhat.com/errata/RHSA-2017:1209
- http://www.openwall.com/lists/oss-security/2017/02/22/3
- http://rhn.redhat.com/errata/RHSA-2017-0501.html
- https://source.android.com/security/bulletin/2017-07-01
- https://access.redhat.com/errata/RHSA-2017:0932
- http://www.securitytracker.com/id/1037876
- http://rhn.redhat.com/errata/RHSA-2017-0316.html
- http://rhn.redhat.com/errata/RHSA-2017-0294.html
- http://rhn.redhat.com/errata/RHSA-2017-0295.html
- http://rhn.redhat.com/errata/RHSA-2017-0366.html
- http://rhn.redhat.com/errata/RHSA-2017-0346.html
- https://github.com/torvalds/linux/commit/5edabca9d4cff7f1f2b68f0bac55ef99d9798ba4
- http://rhn.redhat.com/errata/RHSA-2017-0403.html
- http://www.debian.org/security/2017/dsa-3791
- http://rhn.redhat.com/errata/RHSA-2017-0293.html
- https://www.tenable.com/security/tns-2017-07
- http://www.securityfocus.com/bid/96310
- https://www.exploit-db.com/exploits/41457/
- https://nvd.nist.gov/vuln/detail/CVE-2017-6074