CVE-2017-2634

It was found that the Linux kernel's Datagram Congestion Control Protocol (DCCP) implementation before 2.6.22.17 used the IPv4-only inet_sk_rebuild_header() function for both IPv4 and IPv6 DCCP connections, which could result in memory corruptions. A remote attacker could use this flaw to crash the system.

• CWE-476
• CWE-119

• http://rhn.redhat.com/errata/RHSA-2017-0323.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2017-0346.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2017-0347.htmlThird Party Advisory
• http://www.securityfocus.com/bid/96529Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1037909Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2634Issue Tracking, Patch, Third Party Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=f53dc67c5e7babafe239b93a11678b0e05bead51Patch, Third Party Advisory
• http://rhn.redhat.com/errata/RHSA-2017-0323.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2017-0346.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2017-0347.htmlThird Party Advisory
• http://www.securityfocus.com/bid/96529Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1037909Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2634Issue Tracking, Patch, Third Party Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=f53dc67c5e7babafe239b93a11678b0e05bead51Patch, Third Party Advisory

Published

Jul 27, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-2628curl, as shipped in Red Hat Enterprise Linux 6 before versio…
• CVE-2017-2629curl before 7.53.0 has an incorrect TLS Certificate Status R…4.3
• CVE-2017-2630A stack buffer overflow flaw was found in the Quick Emulator…5.5
• CVE-2017-2631Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2017-2632A logic error in valid_role() in CloudForms role validation …4.9
• CVE-2017-2633An out-of-bounds memory access issue was found in Quick Emul…5.4
• CVE-2017-2635A NULL pointer deference flaw was found in the way libvirt f…7.7
• CVE-2017-2636Race condition in drivers/tty/n_hdlc.c in the Linux kernel t…7
• CVE-2017-2637A design flaw issue was found in the Red Hat OpenStack Platf…9.9
• CVE-2017-2638It was found that the REST API in Infinispan before version …6.5
• CVE-2017-2639It was found that CloudForms does not verify that the server…6.5
• CVE-2017-2640An out-of-bounds write flaw was found in the way Pidgin befo…7.5