CVE-2017-7184: High severity Linux Linux kernel vulnerability
Out-of-bounds kernel heap access vulnerability was found in xfrm, kernel's IP framework for transforming packets. An error dealing with netlink messages from unprivileged user leads to arbitrary read/write and privilege escalation.
Public disclosure on oss-security:
http://openwall.com/lists/oss-security/2017/03/29/2
http://seclists.org/oss-sec/2017/q1/689
Upstream patches:
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=677e806da4d916052585301785d847c3b3e6186a
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f843ee6dd019bcece3e74e76ad9df0155655d0df
Other sources
The xfrmreplayverifylen function in net/xfrm/xfrmuser.c in the Linux kernel through 4.10.6 does not validate certain size data after an XFRMMSGNEWAE update, which allows local users to obtain root privileges or cause a denial of service (heap-based out-of-bounds access) by leveraging the CAPNETADMIN capability, as demonstrated during a Pwn2Own competition at CanSecWest 2017 for the Ubuntu 16.10 linux-image- package 4.8.0.41.52.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-7184?
CVE-2017-7184 is rated as a critical vulnerability that could allow local users to gain root privileges or cause a denial of service.
How do I fix CVE-2017-7184?
To fix CVE-2017-7184, update the Linux kernel to a version that is not vulnerable, specifically versions above 4.10.8 or as specified in security advisories.
What are the affected systems for CVE-2017-7184?
CVE-2017-7184 affects multiple Linux kernel versions up to 4.10.8, including specific versions of Android and Ubuntu Linux.
Can CVE-2017-7184 lead to remote code execution?
CVE-2017-7184 primarily allows local privilege escalation, rather than remote code execution.
Who can exploit CVE-2017-7184?
Local users with appropriate capabilities can exploit CVE-2017-7184 to gain elevated privileges.