CVE-2017-2634: Null Pointer Dereference
It was found that the Linux kernel's Datagram Congestion Control Protocol (DCCP) implementation before 2.6.22.17 used the IPv4-only inetskrebuildheader() function for both IPv4 and IPv6 DCCP connections, which could result in memory corruptions. A remote attacker could use this flaw to crash the system.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-2634?
CVE-2017-2634 is considered a medium severity vulnerability due to the potential for a remote attacker to cause a denial of service.
How do I fix CVE-2017-2634?
To remediate CVE-2017-2634, upgrade to a patched version of the Linux kernel or the affected Red Hat Enterprise Linux products.
Which versions of the Linux kernel are affected by CVE-2017-2634?
CVE-2017-2634 affects Linux kernel versions prior to 2.6.22.17.
Can CVE-2017-2634 affect IPv6 connections?
Yes, CVE-2017-2634 can affect both IPv4 and IPv6 DCCP connections due to the flawed implementation.
Are Red Hat Enterprise Linux products affected by CVE-2017-2634?
Yes, Red Hat Enterprise Linux Desktop and Server versions 5.0, along with specific versions, are affected by CVE-2017-2634.