Strix
26.1K

CVE-2017-1000111

HIGHCVSS 7.8/10EPSS 0.37%

Last modified

CVE-2017-1000111 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. Linux kernel: heap out-of-bounds in AF_PACKET sockets. This new issue is analogous to previously disclosed CVE-2016-8655. EPSS estimates a 0.37% chance of exploitation in the next 30 days.

Description

Linux kernel: heap out-of-bounds in AF_PACKET sockets. This new issue is analogous to previously disclosed CVE-2016-8655. In both cases, a socket option that changes socket state may race with safety checks in packet_set_ring. Previously with PACKET_VERSION. This time with PACKET_RESERVE. The solution is similar: lock the socket for the update. This issue may be exploitable, we did not investigate further. As this issue affects PF_PACKET sockets, it requires CAP_NET_RAW in the process namespace. But note that with user namespaces enabled, any process can create a namespace in which it has CAP_NET_RAW.

Metrics

CVSS 3.1
7.8/10

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Probability
0.37%

29.2th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
LinuxLinux Kernel>= 2.6.27, < 3.2.92
LinuxLinux Kernel>= 3.3, < 3.10.108
LinuxLinux Kernel>= 3.11, < 3.16.47
LinuxLinux Kernel>= 3.17, < 3.18.65
LinuxLinux Kernel>= 3.19, < 4.1.44
LinuxLinux Kernel>= 4.2, < 4.4.82
LinuxLinux Kernel>= 4.5, < 4.9.43
LinuxLinux Kernel>= 4.10, < 4.12.7
RedhatEnterprise Linux5.0
RedhatEnterprise Linux6.0
RedhatEnterprise Linux7.0
RedhatEnterprise Linux Desktop6.0
RedhatEnterprise Linux Desktop7.0
RedhatEnterprise Linux Server6.0
RedhatEnterprise Linux Server7.0
RedhatEnterprise Linux Server Aus7.4
RedhatEnterprise Linux Server Aus7.6
RedhatEnterprise Linux Server Eus7.4
RedhatEnterprise Linux Server Eus7.5
RedhatEnterprise Linux Server Eus7.6
RedhatEnterprise Linux Server Tus7.4
RedhatEnterprise Linux Server Tus7.6
RedhatEnterprise Linux Workstation6.0
RedhatEnterprise Linux Workstation7.0
DebianDebian Linux8.0
DebianDebian Linux9.0

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2017-1000111?
Linux kernel: heap out-of-bounds in AF_PACKET sockets. This new issue is analogous to previously disclosed CVE-2016-8655. In both cases, a socket option that changes socket state may race with safety checks in packet_set_ring. Previously with PACKET_VERSION. This time with PACKET_RESERVE. The solution is similar: lock the socket for the update. This issue may be exploitable, we did not investigate further. As this issue affects PF_PACKET sockets, it requires CAP_NET_RAW in the process namespace. But note that with user namespaces enabled, any process can create a namespace in which it has CAP_NET_RAW.
How severe is CVE-2017-1000111?
CVE-2017-1000111 has a CVSS score of 7.8/10 (HIGH severity). The EPSS model estimates a 0.37% probability of exploitation in the next 30 days.
How do I fix CVE-2017-1000111?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2017-1000111?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST