CVE-2017-18017

The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a…

published January 3, 2018

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.0th percentile for exploit probability.

CVSS
—
EPSS
53%
Percentile
99.0
In the wild
Unconfirmed
What it is

⚠️ A small flaw in the Linux kernel could lead to a denial of service! Just a tweak in the tcpmss_mangle_packet function can cause memory hiccups, resulting in crashes. 🔥 Think of it like a busy restaurant where a waiter accidentally spills water everywhere, causing a slip hazard that temporarily shuts down service — a single misstep can disrupt everything! If exploited, this could lead to a denial of service, effectively shutting down the affected system. While it might not be the end of the world, it could cause significant downtime and frustration for users relying on that system — not ideal for any security hero!

Put simply

Think of it like a busy restaurant where a waiter accidentally spills water everywhere, causing a slip hazard that temporarily shuts down service — a single misstep can disrupt everything! This vulnerability in the Linux kernel allows remote attackers to cause a denial of service due to a use-after-free and memory corruption in the tcpmss_mangle_packet function, especially when xt_TCPMSS is being used in iptables actions.

What to do

If exploited, this could lead to a denial of service, effectively shutting down the affected system. While it might not be the end of the world, it could cause significant downtime and frustration for users relying on that system — not ideal for any security hero! Upgrade your Linux kernel to version 4.11 or above, or at least ensure you're on version 4.9.36 or later if you're using a 4.9.x release. Keeping your system updated is the best defense! You've got this! With these steps, you'll keep your systems safer in no time! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.52841 · 99.0th percentile
Published
2018-01-03T06:00Z
EPSS history
Timeline
  • 03 JAN 06:00Z
    The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a…
    cvelistv5