CVE-2017-6214

MEDIUM

Description

The tcp_splice_read function in net/ipv4/tcp.c in the Linux kernel before 4.9.11 allows remote attackers to cause a denial of service (infinite loop and soft lockup) via vectors involving a TCP packet with the URG flag.

References

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ccf7abb93af09ad0868ae9033d1ca8108bdaec82

http://www.debian.org/security/2017/dsa-3804

http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.11

http://www.securityfocus.com/bid/96421

http://www.securitytracker.com/id/1037897

https://access.redhat.com/errata/RHSA-2017:1372

https://access.redhat.com/errata/RHSA-2017:1615

https://access.redhat.com/errata/RHSA-2017:1616

https://access.redhat.com/errata/RHSA-2017:1647

https://github.com/torvalds/linux/commit/ccf7abb93af09ad0868ae9033d1ca8108bdaec82

https://source.android.com/security/bulletin/2017-09-01

Details

Source: MITRE

Published: 2017-02-23

Updated: 2018-01-05

Type: CWE-399

Risk Information

CVSS v2.0

Base Score: 5

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Impact Score: 2.9

Exploitability Score: 10

Severity: MEDIUM

CVSS v3.0

Base Score: 7.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Impact Score: 3.6

Exploitability Score: 3.9

Severity: HIGH

Tenable Plugins

View all (43 total)

ID	Name	Product	Family	Severity
127425	NewStart CGSL MAIN 4.05 : kernel Multiple Vulnerabilities (NS-SA-2019-0152)	Nessus	NewStart CGSL Local Security Checks	high
124825	EulerOS Virtualization 3.0.1.0 : kernel (EulerOS-SA-2019-1502)	Nessus	Huawei Local Security Checks	high
124808	EulerOS Virtualization for ARM 64 3.0.1.0 : kernel (EulerOS-SA-2019-1484)	Nessus	Huawei Local Security Checks	critical
104109	F5 Networks BIG-IP : Linux kernel vulnerability (K81211720)	Nessus	F5 Networks Local Security Checks	medium
103354	SUSE SLES11 Security Update : kernel (SUSE-SU-2017:2525-1) (Stack Clash)	Nessus	SuSE Local Security Checks	critical
103326	Ubuntu 14.04 LTS : linux vulnerabilities (USN-3422-1) (BlueBorne)	Nessus	Ubuntu Local Security Checks	high
102774	OracleVM 3.4 : Unbreakable / etc (OVMSA-2017-0145) (Stack Clash)	Nessus	OracleVM Local Security Checks	critical
102773	Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3609) (Stack Clash)	Nessus	Oracle Linux Local Security Checks	critical
102511	Oracle Linux 7 : kernel (ELSA-2017-1842-1) (Stack Clash)	Nessus	Oracle Linux Local Security Checks	critical
101929	Ubuntu 16.04 LTS : linux-hwe vulnerabilities (USN-3361-1)	Nessus	Ubuntu Local Security Checks	critical
101477	Virtuozzo 6 : kernel / kernel-abi-whitelists / kernel-debug / etc (VZLSA-2017-1372)	Nessus	Virtuozzo Local Security Checks	medium
101139	Oracle Linux 7 : kernel (ELSA-2017-1615)	Nessus	Oracle Linux Local Security Checks	critical
101138	Oracle Linux 7 : kernel (ELSA-2017-1615-1) (Stack Clash)	Nessus	Oracle Linux Local Security Checks	critical
101120	CentOS 7 : kernel (CESA-2017:1615)	Nessus	CentOS Local Security Checks	critical
101105	Scientific Linux Security Update : kernel on SL7.x x86_64	Nessus	Scientific Linux Local Security Checks	critical
101103	RHEL 6 : MRG (RHSA-2017:1647) (Stack Clash)	Nessus	Red Hat Local Security Checks	critical
101102	RHEL 7 : kernel-rt (RHSA-2017:1616) (Stack Clash)	Nessus	Red Hat Local Security Checks	critical
101101	RHEL 7 : kernel (RHSA-2017:1615)	Nessus	Red Hat Local Security Checks	critical
100568	Scientific Linux Security Update : kernel on SL6.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	medium
100557	CentOS 6 : kernel (CESA-2017:1372)	Nessus	CentOS Local Security Checks	medium
100533	RHEL 6 : kernel (RHSA-2017:1372)	Nessus	Red Hat Local Security Checks	medium
100527	Oracle Linux 6 : kernel (ELSA-2017-1372)	Nessus	Oracle Linux Local Security Checks	medium
100320	SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2017:1360-1)	Nessus	SuSE Local Security Checks	critical
100238	OracleVM 3.2 : Unbreakable / etc (OVMSA-2017-0106)	Nessus	OracleVM Local Security Checks	critical
100237	OracleVM 3.3 : Unbreakable / etc (OVMSA-2017-0105)	Nessus	OracleVM Local Security Checks	critical
100235	Oracle Linux 6 : Unbreakable Enterprise kernel (ELSA-2017-3567)	Nessus	Oracle Linux Local Security Checks	critical
100234	Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3566)	Nessus	Oracle Linux Local Security Checks	critical
100214	SUSE SLES11 Security Update : kernel (SUSE-SU-2017:1301-1)	Nessus	SuSE Local Security Checks	high
100150	SUSE SLES12 Security Update : kernel (SUSE-SU-2017:1247-1)	Nessus	SuSE Local Security Checks	critical
100023	SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2017:1183-1)	Nessus	SuSE Local Security Checks	high
99902	EulerOS 2.0 SP1 : kernel (EulerOS-SA-2017-1057)	Nessus	Huawei Local Security Checks	high
99901	EulerOS 2.0 SP2 : kernel (EulerOS-SA-2017-1056)	Nessus	Huawei Local Security Checks	high
99658	Ubuntu 14.04 LTS : linux-lts-xenial vulnerabilities (USN-3265-2)	Nessus	Ubuntu Local Security Checks	high
99657	Ubuntu 16.04 LTS : linux, linux-aws, linux-gke, linux-raspi2, linux-snapdragon vulnerabilities (USN-3265-1)	Nessus	Ubuntu Local Security Checks	high
99392	OracleVM 3.4 : Unbreakable / etc (OVMSA-2017-0062)	Nessus	OracleVM Local Security Checks	high
99389	Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3539)	Nessus	Oracle Linux Local Security Checks	high
99157	openSUSE Security Update : the Linux Kernel (openSUSE-2017-419)	Nessus	SuSE Local Security Checks	high
99156	openSUSE Security Update : the Linux Kernel (openSUSE-2017-418)	Nessus	SuSE Local Security Checks	high
99106	Virtuozzo 6 : parallels-server-bm-release / vzkernel / etc (VZA-2017-025)	Nessus	Virtuozzo Local Security Checks	critical
97982	Virtuozzo 7 : readykernel-patch (VZA-2017-010)	Nessus	Virtuozzo Local Security Checks	medium
97640	Debian DLA-849-1 : linux security update	Nessus	Debian Local Security Checks	high
97615	Debian DSA-3804-1 : linux - security update	Nessus	Debian Local Security Checks	high
97557	Amazon Linux AMI : kernel (ALAS-2017-805)	Nessus	Amazon Linux Local Security Checks	high