CVE-2017-13715

The __skb_flow_dissect function in net/core/flow_dissector.c in the Linux kernel before 4.3 does not ensure that n_proto, ip_proto, and thoff are initialized, which allows remote attackers to cause a denial of service (system crash) or possibly execute arbitrary code via a single crafted MPLS packet.

• CWE-665

• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a6e544b0a88b53114bfa5a57e21b7be7a8dfc9d0Issue Tracking, Patch, Vendor Advisory
• http://seclists.org/oss-sec/2017/q3/345Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/100517Third Party Advisory, VDB Entry
• https://github.com/torvalds/linux/commit/a6e544b0a88b53114bfa5a57e21b7be7a8dfc9d0Issue Tracking, Patch, Third Party Advisory
• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a6e544b0a88b53114bfa5a57e21b7be7a8dfc9d0Issue Tracking, Patch, Vendor Advisory
• http://seclists.org/oss-sec/2017/q3/345Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/100517Third Party Advisory, VDB Entry
• https://github.com/torvalds/linux/commit/a6e544b0a88b53114bfa5a57e21b7be7a8dfc9d0Issue Tracking, Patch, Third Party Advisory

Published

Aug 29, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-13709In FlightGear before version 2017.3.1, Main/logger.cxx in th…
• CVE-2017-1371Builder tools running in the IBM TRIRIGA Application Platfor…
• CVE-2017-13710The setup_group function in elf.c in the Binary File Descrip…
• CVE-2017-13711Use-after-free vulnerability in the sofree function in slirp…7.5
• CVE-2017-13712NULL Pointer Dereference in the id3v2AddAudioDuration functi…
• CVE-2017-13713T&W WIFI Repeater BE126 allows remote authenticated users to…
• CVE-2017-13716The C++ symbol demangler routine in cplus-dem.c in libiberty…
• CVE-2017-13717Starry Station (aka Starry Router) sets the Access-Control-A…
• CVE-2017-13718The HTTP API supported by Starry Station (aka Starry Router)…
• CVE-2017-13719The Amcrest IPM-721S Amcrest_IPC-AWXX_Eng_N_V2.420.AC00.17.R…
• CVE-2017-1372IBM TRIRIGA Application Platform 3.3, 3.4, and 3.5 is vulner…
• CVE-2017-13720In the PatternMatch function in fontfile/fontdir.c in libXfo…