Russian Vulnerability Scanner Database

Back to List

CVE-2017-1000112

Scores

EPSS

0.841high84.1%
0%20%40%60%80%100%

Percentile: 84.1%

CVSS

7.0high3.x
0246810

CVSS Score: 7.0/10

All CVSS Scores

CVSS 3.x
7.0

Vector: CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS 2.0
6.9

Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C

Description

Linux kernel: Exploitable memory corruption due to UFO to non-UFO path switch. When building a UFO packet with MSG_MORE __ip_append_data() calls ip_ufo_append_data() to append. However in between two send() calls, the append path can be switched from UFO to non-UFO one, which leads to a memory corruption. In case UFO packet lengths exceeds MTU, copy = maxfraglen - skb->len becomes negative on the non-UFO path and the branch to allocate new skb is taken. This triggers fragmentation and computation of fraggap = skb_prev->len - maxfraglen. Fraggap can exceed MTU, causing copy = datalen - transhdrlen - fraggap to become negative. Subsequently skb_copy_and_csum_bits() writes out-of-bounds. A similar issue is present in IPv6 code. The bug was introduced in e89e9cf539a2 (“[IPv4/IPv6]: UFO Scatter-gather approach”) on Oct 18 2005.

Scaner-VS 7 — a modern vulnerability management solution

Uses this database for vulnerability detection. High-speed search, cross-platform, advanced configuration audit, and flexible filtering. Suitable for organizations of any size.
Learn more about Scaner-VS 7

Sources

debiannvdredhatubuntu

CWEs

CWE-122CWE-362

Exploits

Exploit ID: 43418

Source: exploitdb

URL: https://www.exploit-db.com/exploits/43418

Exploit ID: 45147

Source: exploitdb

URL: https://www.exploit-db.com/exploits/45147

Exploit ID: 47169

Source: exploitdb

URL: https://www.exploit-db.com/exploits/47169

Exploit ID: CVE-2017-1000112

Source: github-poc

URL: https://github.com/Spydomain/CVE-2017-1000112-PoC

Recommendations

Source: nvd

For details on how to apply this update, which includes the changes described in this advisory, refer to:
https://access.redhat.com/articles/11258
The system must be rebooted for this update to take effect.

URL: https://access.redhat.com/errata/RHSA-2019:4159

Source: nvd

For details on how to apply this update, which includes the changes described in this advisory, refer to:
https://access.redhat.com/articles/11258
The system must be rebooted for this update to take effect.

URL: https://access.redhat.com/errata/RHSA-2019:1932

Source: nvd

For details on how to apply this update, which includes the changes described in this advisory, refer to:
https://access.redhat.com/articles/11258
The system must be rebooted for this update to take effect.

URL: https://access.redhat.com/errata/RHSA-2019:1931

Source: nvd

For details on how to apply this update, which includes the changes described in this advisory, refer to:
https://access.redhat.com/articles/11258
The system must be rebooted for this update to take effect.

URL: https://access.redhat.com/errata/RHSA-2017:3200

Source: nvd

For details on how to apply this update, which includes the changes described in this advisory, refer to:
https://access.redhat.com/articles/11258
The system must be rebooted for this update to take effect.

URL: https://access.redhat.com/errata/RHSA-2017:2931

Source: nvd

For details on how to apply this update, which includes the changes described in this advisory, refer to:
https://access.redhat.com/articles/11258
The system must be rebooted for this update to take effect.

URL: https://access.redhat.com/errata/RHSA-2017:2930

Source: nvd

For details on how to apply this update, which includes the changes described in this advisory, refer to:
https://access.redhat.com/articles/11258
The system must be rebooted for this update to take effect.

URL: https://access.redhat.com/errata/RHSA-2017:2918

Vulnerable Software (164)

Type: Configuration

Product: kernel

Operating System: rhel 5.9

Trait: 
{  "fixed": "2.6.18-348.44.1.el5"}

Source: redhat

Type: Configuration

Product: kernel

Operating System: rhel 5

Trait: 
{  "fixed": "2.6.18-438.el5"}

Source: redhat

Type: Configuration

Product: kernel

Operating System: rhel 6

Trait: 
{  "fixed": "2.6.32-696.16.1.el6"}

Source: redhat

Type: Configuration

Product: kernel

Operating System: rhel 7

Trait: 
{  "fixed": "3.10.0-693.5.2.el7"}

Source: redhat

Type: Configuration

Product: kernel

Operating System: rhel 7.3

Trait: 
{  "fixed": "3.10.0-514.71.1.el7"}

Source: redhat

Type: Configuration

Product: kernel

Operating System: rhel 7.3

Trait: 
{  "fixed": "3.10.0-514.71.1.el7"}

Source: redhat

Type: Configuration

Product: kernel

Operating System: rhel 7.3

Trait: 
{  "fixed": "3.10.0-514.71.1.el7"}

Source: redhat

Type: Configuration

Product: kernel-rt

Operating System: rhel

Trait: 
{  "fixed": "3.10.0-693.5.2.rt56.626.el7"}

Source: redhat

Type: Configuration

Product: kernel-rt

Operating System: rhel

Trait: 
{  "fixed": "3.10.0-693.5.2.rt56.592.el6rt"}

Source: redhat

Type: Configuration

Product: linux

Operating System: debian

Trait: 
{  "fixed": "4.12.6-1"}

Source: debian

Type: Configuration

Product: linux

Operating System: ubuntu artful 17.10

Trait: 
{  "unaffected": true}

Source: ubuntu

Type: Configuration

Product: linux

Operating System: ubuntu bionic 18.04

Trait: 
{  "unaffected": true}

Source: ubuntu

Type: Configuration

Product: linux

Operating System: ubuntu cosmic 18.10

Trait: 
{  "unaffected": true}

Source: ubuntu

Type: Configuration

Product: linux

Operating System: ubuntu focal 20.04

Trait: 
{  "unaffected": true}

Source: ubuntu

Type: Configuration

Product: linux

Operating System: ubuntu jammy 22.04

Trait: 
{  "unaffected": true}

Source: ubuntu

Type: Configuration

Product: linux

Operating System: ubuntu noble 24.04

Trait: 
{  "unaffected": true}

Source: ubuntu

Type: Configuration

Product: linux

Operating System: ubuntu oracular 24.10

Trait: 
{  "unaffected": true}

Source: ubuntu

Type: Configuration

Product: linux

Operating System: ubuntu trusty 14.04

Trait: 
{  "fixed": "3.13.0-128.177"}

Source: ubuntu

Type: Configuration

Product: linux

Operating System: ubuntu xenial 16.04

Trait: 
{  "fixed": "4.4.0-91.114"}

Source: ubuntu

Type: Configuration

Product: linux

Operating System: ubuntu zesty 17.04

Trait: 
{  "fixed": "4.10.0-32.36"}

Source: ubuntu