CVE ID | CVE-2017-7184 |
CVSS SCORE | 6.9, AV:L/AC:M/Au:N/C:C/I:C/A:C |
AFFECTED VENDORS |
Linux |
AFFECTED PRODUCTS |
Linux Kernel |
VULNERABILITY DETAILS |
The specific flaw exists within the handling of xfrm states. The issue results from the lack of proper validation of user-supplied data, which can result in a memory access past the end of an allocated buffer. An attacker can leverage this vulnerability to elevate privileges and execute arbitrary code under the context of the kernel. |
ADDITIONAL DETAILS |
Linux has issued an update to correct this vulnerability. More details can be found at:
https://www.ubuntu.com/usn/usn-3251-1/ |
DISCLOSURE TIMELINE |
|
CREDIT | Chaitin Security Research Lab |