Published: 26/07/2018 Updated: 12/02/2023

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

A kernel data leak due to an out-of-bound read was found in the Linux kernel in inet_diag_msg_sctp{,l}addr_fill() and sctp_get_sctp_info() functions present since version 4.7-rc1 through version 4.13. A data leak happens when these functions fill in sockaddr data structures used to export socket's diagnostic information. As a result, up to 100 bytes of the slab data could be leaked to a userspace.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel 4.7
linux linux kernel
debian debian linux 8.0
debian debian linux 9.0

Debian Bug report logs - #875881 linux: CVE-2017-1000251 Package: src:linux; Maintainer for src:linux is Debian Kernel Team <debian-kernel@listsdebianorg>; Reported by: Christoph Anton Mitterer <calestyo@scientianet> Date: Fri, 15 Sep 2017 14:42:01 UTC Severity: critical Tags: confirmed, fixed-upstream, security, ...

Synopsis Important: kernel-rt security and bug fix update Type/Severity Security Advisory: Important Topic An update for kernel-rt is now available for Red Hat Enterprise MRG 2Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CVS ...

Synopsis Important: kernel-rt security and bug fix update Type/Severity Security Advisory: Important Topic An update for kernel-rt is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (C ...

Synopsis Important: kernel security and bug fix update Type/Severity Security Advisory: Important Topic An update for kernel is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CVSS) b ...

Several vulnerabilities have been discovered in the Linux kernel that may lead to privilege escalation, denial of service or information leaks CVE-2017-7518 Andy Lutomirski discovered that KVM is prone to an incorrect debug exception (#DB) error occurring while emulating a syscall instruction A process inside a guest can take advanta ...

A buffer overflow was discovered in tpacket_rcv() function in the Linux kernel since v46-rc1 through v413 A number of socket-related syscalls can be made to set up a configuration when each packet received by a network interface can cause writing up to 10 bytes to a kernel memory outside of a kernel buffer This can cause unspecified kernel data ...

A kernel data leak due to an out-of-bound read was found in the Linux kernel in inet_diag_msg_sctp{,l}addr_fill() and sctp_get_sctp_info() functions present since version 47-rc1 through version 413 A data leak happens when these functions fill in sockaddr data structures used to export socket's diagnostic information As a result, up to 100 byte ...

Linux Kernel version 48 on Ubuntu 1604 suffers from an sctp kernel pointer leak vulnerability ...

An Directory For Archiving Non-Robust Exploits, Exploit Samples and Malware Samples/Parts

Extreme-Exploit An Directory For Archiving Non-Robust Exploits But Tested or Approved or Used ! Some Exploit May Have been written By Others and some minor/major changes applied to them List Of Exploits CVE-2017-7558 Linux Kernel version 48 on Ubuntu 1604 suffers from an sctp kernel pointer leak vulnerability

CWE-125 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7558 http://seclists.org/oss-sec/2017/q3/338 https://marc.info/?l=linux-netdev&m=150348777122761&w=2 https://www.debian.org/security/2017/dsa-3981 https://access.redhat.com/errata/RHSA-2017:2931 https://access.redhat.com/errata/RHSA-2017:2930 https://access.redhat.com/errata/RHSA-2017:2918 http://www.securitytracker.com/id/1039221 http://www.securityfocus.com/bid/100466 https://nvd.nist.gov https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=875881 https://github.com/r3dxpl0it/Extreme-Exploit https://access.redhat.com/errata/RHSA-2017:2918 https://www.debian.org/security/./dsa-3981

CVE-2017-7558

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Exploits

Github Repositories

References

Vulmon Search

About

Products

Connect