ALT-PU-2017-1843-1
Package kernel-image-std-def updated to version 4.4.76-alt0.M80P.1 for branch p8 in task 185117.
Closed vulnerabilities
Published: 2018-01-03
Modified: 2025-01-03
Modified: 2025-01-03
CVE-2017-18017
The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service (use-after-free and memory corruption) or possibly have unspecified other impact by leveraging the presence of xt_TCPMSS in an iptables action.
Severity: CRITICAL (9.8)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References:
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2638fd0f92d4397884fd991d8f4925cb3f081901
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2638fd0f92d4397884fd991d8f4925cb3f081901
- SUSE-SU-2018:0383
- SUSE-SU-2018:0383
- openSUSE-SU-2018:0408
- openSUSE-SU-2018:0408
- SUSE-SU-2018:0416
- SUSE-SU-2018:0416
- SUSE-SU-2018:0482
- SUSE-SU-2018:0482
- SUSE-SU-2018:0555
- SUSE-SU-2018:0555
- SUSE-SU-2018:0660
- SUSE-SU-2018:0660
- SUSE-SU-2018:0834
- SUSE-SU-2018:0834
- SUSE-SU-2018:0841
- SUSE-SU-2018:0841
- SUSE-SU-2018:0848
- SUSE-SU-2018:0848
- SUSE-SU-2018:0986
- SUSE-SU-2018:0986
- http://patchwork.ozlabs.org/patch/746618/
- http://patchwork.ozlabs.org/patch/746618/
- 102367
- 102367
- USN-3583-1
- USN-3583-1
- USN-3583-2
- USN-3583-2
- RHSA-2018:0676
- RHSA-2018:0676
- RHSA-2018:1062
- RHSA-2018:1062
- RHSA-2018:1130
- RHSA-2018:1130
- RHSA-2018:1170
- RHSA-2018:1170
- RHSA-2018:1319
- RHSA-2018:1319
- RHSA-2018:1737
- RHSA-2018:1737
- https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1739765
- https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1739765
- https://github.com/torvalds/linux/commit/2638fd0f92d4397884fd991d8f4925cb3f081901
- https://github.com/torvalds/linux/commit/2638fd0f92d4397884fd991d8f4925cb3f081901
- https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0
- https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0
- [debian-lts-announce] 20180502 [SECURITY] [DLA 1369-1] linux security update
- [debian-lts-announce] 20180502 [SECURITY] [DLA 1369-1] linux security update
- https://lkml.org/lkml/2017/4/2/13
- https://lkml.org/lkml/2017/4/2/13
- https://security.netapp.com/advisory/ntap-20250103-0010/
- https://support.f5.com/csp/article/K18352029
- https://support.f5.com/csp/article/K18352029
- USN-3583-1
- USN-3583-1
- USN-3583-2
- USN-3583-2
- https://www.arista.com/en/support/advisories-notices/security-advisories/4577-security-advisory-34
- https://www.arista.com/en/support/advisories-notices/security-advisories/4577-security-advisory-34
- DSA-4187
- DSA-4187
- https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.36
- https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.36