CVE-2017-7542
UnknownEPSS 0.46%
Last modified
CVE-2017-7542 is a vulnerability of currently unknown severity. The ip6_find_1stfragopt function in net/ipv6/output_core.c in the Linux kernel through 4.12.3 allows local users to cause a denial of service (integer overflow and infinite loop) by leveraging the ability to open a raw socket.. EPSS estimates a 0.46% chance of exploitation in the next 30 days.
Description
The ip6_find_1stfragopt function in net/ipv6/output_core.c in the Linux kernel through 4.12.3 allows local users to cause a denial of service (integer overflow and infinite loop) by leveraging the ability to open a raw socket.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | <= 4.12.3 |
References
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6399f1fae4ec29fab5ec76070435555e256ca3a6Issue Tracking, Patch, Third Party Advisory
- https://github.com/torvalds/linux/commit/6399f1fae4ec29fab5ec76070435555e256ca3a6Issue Tracking, Patch, Third Party Advisory
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6399f1fae4ec29fab5ec76070435555e256ca3a6Issue Tracking, Patch, Third Party Advisory
- https://github.com/torvalds/linux/commit/6399f1fae4ec29fab5ec76070435555e256ca3a6Issue Tracking, Patch, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2017-7542?
The ip6_find_1stfragopt function in net/ipv6/output_core.c in the Linux kernel through 4.12.3 allows local users to cause a denial of service (integer overflow and infinite loop) by leveraging the ability to open a raw socket.
How severe is CVE-2017-7542?
Severity scoring for CVE-2017-7542 is pending analysis. The EPSS model estimates a 0.46% probability of exploitation in the next 30 days.
How do I fix CVE-2017-7542?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2017
- CVE-2017-7536In Hibernate Validator 5.2.x before 5.2.5 final, 5.3.x, and …7
- CVE-2017-7537It was found that a mock CMC authentication plugin with a ha…5.9
- CVE-2017-7538A cross-site scripting (XSS) flaw was found in how an organi…3.5
- CVE-2017-7539An assertion-failure flaw was found in Qemu before 2.10.1, i…5.3
- CVE-2017-7540rubygem-safemode, as used in Foreman, versions 1.3.2 and ear…
- CVE-2017-7541The brcmf_cfg80211_mgmt_tx function in drivers/net/wireless/…7.8
- CVE-2017-7543A race-condition flaw was discovered in openstack-neutron be…5.3
- CVE-2017-7544libexif through 0.6.21 is vulnerable to out-of-bounds heap r…
- CVE-2017-7545It was discovered that the XmlUtils class in jbpmmigration 6…6.5
- CVE-2017-7546PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and…
- CVE-2017-7547PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and…
- CVE-2017-7548PostgreSQL versions before 9.4.13, 9.5.8 and 9.6.4 are vulne…7.5
Are you affected by CVE-2017-7542?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST