Heap-based buffer overflow in drivers/net/macsec.c in the MACsec module in the Linux kernel through 4.10.12 allows attackers to cause a denial of service or possibly have unspecified other impact by leveraging the use of a MAX_SKB_FRAGS+1 size in conjunction with the NETIF_F_FRAGLIST feature, leading to an error in the skb_to_sgvec function.
References
| Link | Resource |
|---|---|
| https://git.kernel.org/pub/scm/linux/kernel/git/davem/net.git/commit/?id=4d6fa57b4dab0d77f4d8e9d9c73d1e63f6fe8fee | Patch |
| https://bugzilla.redhat.com/show_bug.cgi?id=1445207 | Issue Tracking Patch Third Party Advisory |
| https://git.kernel.org/pub/scm/linux/kernel/git/davem/net.git/commit/?id=5294b83086cc1c35b4efeca03644cf9d12282e5b | Patch |
| http://www.securityfocus.com/bid/98014 | Third Party Advisory VDB Entry |
| http://www.securitytracker.com/id/1038500 | Third Party Advisory VDB Entry |
| https://access.redhat.com/errata/RHSA-2017:1616 | Third Party Advisory |
| https://access.redhat.com/errata/RHSA-2017:1615 | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Jun 2023, 15:56
| Type | Values Removed | Values Added |
|---|---|---|
| References | (REDHAT) https://access.redhat.com/errata/RHSA-2017:1615 - Third Party Advisory | |
| References | (SECTRACK) http://www.securitytracker.com/id/1038500 - Third Party Advisory, VDB Entry | |
| References | (REDHAT) https://access.redhat.com/errata/RHSA-2017:1616 - Third Party Advisory |
Information
Published : 2017-04-25 14:59
Updated : 2023-06-21 15:56
NVD link : CVE-2017-7477
Mitre link : CVE-2017-7477
JSON object : View
Products Affected
linux
- linux_kernel
CWE
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer