Published: 14/05/2017 Updated: 14/02/2023

CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9

CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8

VMScore: 641

Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

The ipxitf_ioctl function in net/ipx/af_ipx.c in the Linux kernel up to and including 4.11.1 mishandles reference counts, which allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via a failed SIOCGIFADDR ioctl call for an IPX interface.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel
debian debian linux 8.0
debian debian linux 9.0

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks CVE-2017-7487 Li Qiang reported a reference counter leak in the ipxitf_ioctl function which may result into a use-after-free vulnerability, triggerable when a IPX interface is configured CVE ...

Several security issues were fixed in the Linux kernel ...

The system could be made to crash under certain conditions ...

Several security issues were fixed in the Linux kernel ...

A reference counter leak in Linux kernel in ipxitf_ioctl function was found which results in a use after free vulnerability that's triggerable from unprivileged userspace when IPX interface is configured ...

CWE-416 https://patchwork.ozlabs.org/patch/757549/https://github.com/torvalds/linux/commit/ee0d8d8482345ff97a75a7d747efc309f13b0d80 https://bugzilla.redhat.com/show_bug.cgi?id=1447734 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ee0d8d8482345ff97a75a7d747efc309f13b0d80 http://www.securityfocus.com/bid/98439 http://www.securitytracker.com/id/1039237 https://source.android.com/security/bulletin/2017-09-01 http://www.debian.org/security/2017/dsa-3886 https://nvd.nist.gov https://www.debian.org/security/./dsa-3886 https://usn.ubuntu.com/3406-1/

CVE-2017-7487

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect