Published: 15/09/2017 Updated: 16/03/2018

CVSS v2 Base Score: 4.9 | Impact Score: 6.9 | Exploitability Score: 3.9

CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8

VMScore: 495

Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C

The iscsi_if_rx function in drivers/scsi/scsi_transport_iscsi.c in the Linux kernel up to and including 4.13.2 allows local users to cause a denial of service (panic) by leveraging incorrect length validation.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel

Debian Bug report logs - #875881 linux: CVE-2017-1000251 Package: src:linux; Maintainer for src:linux is Debian Kernel Team <debian-kernel@listsdebianorg>; Reported by: Christoph Anton Mitterer <calestyo@scientianet> Date: Fri, 15 Sep 2017 14:42:01 UTC Severity: critical Tags: confirmed, fixed-upstream, security, ...

Several vulnerabilities have been discovered in the Linux kernel that may lead to privilege escalation, denial of service or information leaks CVE-2017-7518 Andy Lutomirski discovered that KVM is prone to an incorrect debug exception (#DB) error occurring while emulating a syscall instruction A process inside a guest can take advanta ...

Several security issues were fixed in the Linux kernel ...

The iscsi_if_rx() function in 'drivers/scsi/scsi_transport_iscsic' in the Linux kernel from v2624-rc1 through 4132 allows local users to cause a denial of service (a system panic) by making a number of certain syscalls by leveraging incorrect length validation in the kernel code ...

# Exploit Title: Linux Kernel<414rc3 Local Denial of Service # Date: 2017-Oct-02 # Exploit Author: Wang Chenyu (Nanyang Technological University) # Version:Linux kernel 4-14-rc1 # Tested on:Ubuntu 1604 desktop amd64 # CVE : CVE-2017-14489 # CVE description: This CVE is assigned to Wang Chunyu (Red Hat) and discovered by Syzkaller Provided fo ...

Linux kernel versions prior to 4-14-rc3 suffer from a local denial of service vulnerability ...

CWE-20 https://patchwork.kernel.org/patch/9923803/https://bugzilla.redhat.com/show_bug.cgi?id=1490421 http://www.securityfocus.com/bid/101011 https://www.exploit-db.com/exploits/42932/http://www.debian.org/security/2017/dsa-3981 https://usn.ubuntu.com/3583-2/https://usn.ubuntu.com/3583-1/https://nvd.nist.gov https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=875881 https://www.exploit-db.com/exploits/42932/https://usn.ubuntu.com/3469-2/https://www.debian.org/security/./dsa-3981

CVE-2017-14489

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect