CVE-2017-11600: High severity linux kernel vulnerability

Published Jul 24, 2017
·
Updated

net/xfrm/xfrmpolicy.c in the Linux kernel through 4.12.3, when CONFIGXFRMMIGRATE is enabled, does not ensure that the dir value of xfrmuserpolicyid is XFRMPOLICYMAX or less, which allows local users to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via an XFRMMSGMIGRATE xfrm Netlink message.

Other sources

xfrmmigrate() function in net/xfrm/xfrmpolicy.c file in the Linux kernel build with CONFIGXFRMMIGRATE does not check that the dir parameter is less than XFRMPOLICYMAX. This allows a local attacker cause a denial of service (out-of-bounds access) or possibly have unspecified other impact by sending a XFRMMSGMIGRATE netlink message. This flaw is present in the Linux kernel since an introduction of XFRMMSGMIGRATE in 2.6.21-rc1 and upto 4.13-rc3.

References:

http://seclists.org/bugtraq/2017/Jul/30

http://marc.info/?t=150169629800003&r=1&w=2

http://marc.info/?l=linux-netdev&m=150169627919528&w=2

Suggested upstream patch:

https://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec.git/commit/?id=7bab09631c2a303f87a7eb7e3d69e888673b9b7e

An upstream patch:

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7bab09631c2a303f87a7eb7e3d69e888673b9b7e

Red Hat

Affected Software

8 affected componentsFixes available
debian/linux
4.19.249-24.19.289-25.10.197-15.10.205-26.1.66-16.1.69-16.5.13-16.6.9-1
Linux Linux kernel>=2.6.21<3.2.93
Linux Linux kernel>=3.3<3.10.108
Linux Linux kernel>=3.11<3.18.70
Linux Linux kernel>=3.19<4.1.45
Linux Linux kernel>=4.2<4.4.87
Linux Linux kernel>=4.5<4.9.48
Linux Linux kernel>=4.10<4.12.11

Event History

Jul 24, 2017
CVE Published
via MITRE·07:00 AM
Data Sourced
via MITRE·07:00 AM
Description
Jul 25, 2017
Data Sourced
via Red Hat·04:05 PM
DescriptionSeverityAffected Software

Frequently Asked Questions

1

What is the severity of CVE-2017-11600?

CVE-2017-11600 has a medium severity rating due to its potential to cause a denial of service.

2

How do I fix CVE-2017-11600?

To fix CVE-2017-11600, ensure that your Linux kernel is upgraded to a version later than 4.12.3 that includes the necessary patches.

3

Which systems are affected by CVE-2017-11600?

CVE-2017-11600 affects Linux kernel versions prior to 4.12.3 when CONFIG_XFRM_MIGRATE is enabled.

4

What are the risks associated with CVE-2017-11600?

The risks associated with CVE-2017-11600 include potential denial of service and out-of-bounds memory access.

5

Is there a workaround for CVE-2017-11600?

A temporary workaround for CVE-2017-11600 involves disabling the CONFIG_XFRM_MIGRATE option if it is not needed.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203