SB2017091901 - Denial of service in Linux Kernel



SB2017091901 - Denial of service in Linux Kernel

Published: September 19, 2017

Security Bulletin ID SB2017091901
Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Local access
Highest impact Denial of service

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 security vulnerability.


1) Buffer overflow (CVE-ID: CVE-2017-14497)

The vulnerability allows a local attacker to cause DoS condition on the target system.

The weakness exists due to buffer overflow in the tpacket_rcv() function in 'net/packet/af_packet.c'. A local attacker can perform specially crafted system calls to write up to 10 bytes to kernel memory outside of the allocated kernel buffer, corrupt memory or XFS disk contents and cause the system to crash.

Successful exploitation of the vulnerability result in denial of service.

Remediation

Install update from vendor's website.