CVE-2017-7542: Integer Overflow
Integer overflow vulnerability in ip6find1stfragopt() function was found. Local attacker that has privileges to open raw socket can cause infinite loop inside ip6find1stfragopt() function.
Upstream patch:
https://git.kernel.org/pub/scm/linux/kernel/git/davem/net.git/commit/?id=6399f1fae4ec29fab5ec76070435555e256ca3a6
What is a denial of service:
https://access.redhat.com/denial-of-service-flaw-type
Other sources
The ip6find1stfragopt function in net/ipv6/outputcore.c in the Linux kernel through 4.12.3 allows local users to cause a denial of service (integer overflow and infinite loop) by leveraging the ability to open a raw socket.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.187-1Fixed in 6.12.107-1Fixed in 6.12.111-1Fixed in 7.2.9-1Fixed in 7.2.10-1
Event History
Frequently Asked Questions
What is CVE-2017-7542?
CVE-2017-7542 is a vulnerability in the Linux kernel that allows local users to cause a denial of service.
How severe is CVE-2017-7542?
CVE-2017-7542 has a severity level of medium.
What is the affected software for CVE-2017-7542?
The affected software includes Linux kernel versions up to 4.12.3, Ubuntu Linux, Debian Linux, and other related packages.
How can the CVE-2017-7542 vulnerability be fixed?
To fix the CVE-2017-7542 vulnerability, update to Linux kernel version 4.13~ or apply the recommended patches from your Linux distribution.
Where can I find more information about CVE-2017-7542?
You can find more information about CVE-2017-7542 on the official Git repository and security advisories from Linux distributions.