Cette page suit l'état du correctif pour Ubuntu. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2017-16939 →

UBUNTU-CVE-2017-16939

The XFRM dump policy implementation in net/xfrm/xfrm_user.c in the Linux kernel before 4.13.11 allows local users to gain privileges or cause a denial...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

The XFRM dump policy implementation in net/xfrm/xfrm_user.c in the Linux kernel before 4.13.11 allows local users to gain privileges or cause a denial of service (use-after-free) via a crafted SO_RCVBUF setsockopt system call in conjunction with XFRM_MSG_GETPOLICY Netlink messages.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Ubuntu:14.04:LTS linux

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.0-137.186"}]}]

Ubuntu:14.04:LTS linux-aws

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1005.5"}]}]

Ubuntu:14.04:LTS linux-lts-xenial

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-103.126~14.04.1"}]}]

Ubuntu:16.04:LTS linux

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-103.126"}]}]

Ubuntu:16.04:LTS linux-aws

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1043.52"}]}]

Ubuntu:16.04:LTS linux-azure

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.0-1016.16"}]}]

Ubuntu:16.04:LTS linux-euclid

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-9020.21"}]}]

Ubuntu:16.04:LTS linux-gcp

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.0-1002.5"}]}]

Ubuntu:16.04:LTS linux-hwe

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.0-32.35~16.04.1"}]}]

Ubuntu:16.04:LTS linux-kvm

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1012.17"}]}]

Ubuntu:16.04:LTS linux-oem

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.0-1010.11"}]}]

Ubuntu:16.04:LTS linux-raspi2

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1079.87"}]}]

Ubuntu:16.04:LTS linux-snapdragon

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1081.86"}]}]

Ubuntu:Pro:FIPS-updates:16.04:LTS linux-fips

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1005.5"}]}]

Ubuntu:20.04:LTS linux-azure-fde