Vulnerability Description
net/xfrm/xfrm_policy.c in the Linux kernel through 4.12.3, when CONFIG_XFRM_MIGRATE is enabled, does not ensure that the dir value of xfrm_userpolicy_id is XFRM_POLICY_MAX or less, which allows local users to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via an XFRM_MSG_MIGRATE xfrm Netlink message.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | >= 2.6.21, < 3.2.93 |
Related Weaknesses (CWE)
References
- http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.htmlMailing ListThird Party Advisory
- http://seclists.org/bugtraq/2017/Jul/30Mailing ListThird Party Advisory
- http://www.debian.org/security/2017/dsa-3981Third Party Advisory
- http://www.securityfocus.com/bid/99928Third Party AdvisoryVDB Entry
- https://access.redhat.com/errata/RHSA-2018:1965Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:2003Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:1170Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:1190Third Party Advisory
- https://source.android.com/security/bulletin/pixel/2017-11-01Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.htmlMailing ListThird Party Advisory
- http://seclists.org/bugtraq/2017/Jul/30Mailing ListThird Party Advisory
- http://www.debian.org/security/2017/dsa-3981Third Party Advisory
- http://www.securityfocus.com/bid/99928Third Party AdvisoryVDB Entry
- https://access.redhat.com/errata/RHSA-2018:1965Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:2003Third Party Advisory
FAQ
What is CVE-2017-11600?
CVE-2017-11600 is a vulnerability with a CVSS score of 7.0 (HIGH). net/xfrm/xfrm_policy.c in the Linux kernel through 4.12.3, when CONFIG_XFRM_MIGRATE is enabled, does not ensure that the dir value of xfrm_userpolicy_id is XFRM_POLICY_MAX or less, which allows local ...
How severe is CVE-2017-11600?
CVE-2017-11600 has been rated HIGH with a CVSS base score of 7.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2017-11600?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel.