Back to search
CVE-2017-2671
Published: Apr 5, 2017
Modified: Aug 5, 2024
PUBLISHED
Description
The ping_unhash function in net/ipv4/ping.c in the Linux kernel through 4.10.8 is too late in obtaining a certain lock and consequently cannot ensure that disconnect function calls are safe, which allows local users to cause a denial of service (panic) by leveraging access to the protocol value of IPPROTO_ICMP in a socket system call.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
97407
vdb-entry
x_refsource_BID
[oss-security] 20170404 Re: Linux kernel ping socket / AF_LLC connect() sin_family race
mailing-list
x_refsource_MLIST
RHSA-2017:2669
vendor-advisory
x_refsource_REDHAT
RHSA-2018:1854
vendor-advisory
x_refsource_REDHAT
USN-3754-1
vendor-advisory
x_refsource_UBUNTU
https://twitter.com/danieljiang0415/status/845116665184497664
x_refsource_MISC
https://github.com/danieljiang0415/android_kernel_crash_poc
x_refsource_MISC
42135
exploit
x_refsource_EXPLOIT-DB
RHSA-2017:2077
vendor-advisory
x_refsource_REDHAT
RHSA-2017:1842
vendor-advisory
x_refsource_REDHAT
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now