CVE-2017-9242

The __ip6_append_data function in net/ipv6/ip6_output.c in the Linux kernel through 4.11.3 is too late in checking whether an overwrite of an skb data…

published May 27, 2017

CVSS
—
EPSS
0%
Percentile
33.4
In the wild
Unconfirmed
What it is

The __ip6_append_data function in net/ipv6/ip6_output.c in the Linux kernel through 4.11.3 is too late in checking whether an overwrite of an skb data structure may occur, which allows local users to cause a denial of service (system crash) via crafted system calls.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00405 · 33.4th percentile
Published
2017-05-27T00:00Z
EPSS history
Timeline
  • 27 MAY 00:00Z
    The __ip6_append_data function in net/ipv6/ip6_output.c in the Linux kernel through 4.11.3 is too late in checking whether an overwrite of an skb data…
    cvelistv5