Summary
It was discovered that the xfrm framework for transforming packets in the
Linux kernel did not properly validate data received from user space. A
local attacker could use this to cause a denial of service (system crash)
or execute arbitrary code with administrative privileges.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | linux | 3.13.0-115.162 |
Vulnerabilities 1
-
Unscored —CVE-2017-7184 Public exploit
The xfrm_replay_verify_len function in net/xfrm/xfrm_user.c in the Linux kernel through 4.10.6 does not validate certai…
References
-
report
https://ubuntu.com/security/CVE-2017-7184