CVE-2017-11600

net/xfrm/xfrm_policy.c in the Linux kernel through 4.12.3, when CONFIG_XFRM_MIGRATE is enabled, does not ensure that the dir value of xfrm_userpolicy_id is…

published July 24, 2017

CVSS
—
EPSS
0%
Percentile
33.7
In the wild
Unconfirmed
What it is

net/xfrm/xfrm_policy.c in the Linux kernel through 4.12.3, when CONFIG_XFRM_MIGRATE is enabled, does not ensure that the dir value of xfrm_userpolicy_id is XFRM_POLICY_MAX or less, which allows local users to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via an XFRM_MSG_MIGRATE xfrm Netlink message.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00406 · 33.7th percentile
Published
2017-07-24T07:00Z
EPSS history
Timeline
  • 24 JUL 07:00Z
    net/xfrm/xfrm_policy.c in the Linux kernel through 4.12.3, when CONFIG_XFRM_MIGRATE is enabled, does not ensure that the dir value of xfrm_userpolicy_id is…
    cvelistv5