CVE-2017-18017

The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service (use-after-free and memory corruption) or possibly have unspecified other impact by leveraging the presence of xt_TCPMSS in an iptables action.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 96%
VendorProductVersion
linuxlinux_kernel
3.2 ≤
𝑥
< 3.2.99
linuxlinux_kernel
3.3 ≤
𝑥
< 3.10.108
linuxlinux_kernel
3.11 ≤
𝑥
< 3.16.54
linuxlinux_kernel
3.17 ≤
𝑥
< 3.18.60
linuxlinux_kernel
3.19 ≤
𝑥
< 4.1.43
linuxlinux_kernel
4.2 ≤
𝑥
< 4.4.76
linuxlinux_kernel
4.5 ≤
𝑥
< 4.9.36
linuxlinux_kernel
4.10 ≤
𝑥
< 4.11
debiandebian_linux
7.0
debiandebian_linux
8.0
aristaeos
4.20.1fx-virtual-router:fx
f5arx
6.2.0 ≤
𝑥
≤ 6.4.0
susecaas_platform
*
opensuseleap
42.3
canonicalubuntu_linux
12.04
canonicalubuntu_linux
14.04
redhatmrg_realtime
2.0
redhatenterprise_linux_desktop
6.0
redhatenterprise_linux_desktop
7.0
redhatenterprise_linux_eus
7.3
redhatenterprise_linux_eus
7.4
redhatenterprise_linux_eus
7.6
redhatenterprise_linux_eus
7.7
redhatenterprise_linux_server
6.0
redhatenterprise_linux_server
7.0
redhatenterprise_linux_server_aus
7.3
redhatenterprise_linux_server_aus
7.4
redhatenterprise_linux_server_aus
7.6
redhatenterprise_linux_server_aus
7.7
redhatenterprise_linux_server_tus
7.3
redhatenterprise_linux_server_tus
7.4
redhatenterprise_linux_server_tus
7.6
redhatenterprise_linux_server_tus
7.7
redhatenterprise_linux_workstation
6.0
redhatenterprise_linux_workstation
7.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
linux
bullseye
5.10.223-1
fixed
bullseye (security)
5.10.226-1
fixed
bookworm
6.1.106-3
fixed
bookworm (security)
6.1.112-1
fixed
trixie
6.11.5-1
fixed
sid
6.11.6-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
linux
noble
not-affected
jammy
not-affected
focal
not-affected
cosmic
not-affected
bionic
not-affected
artful
not-affected
zesty
ignored
xenial
Fixed 4.4.0-89.112
released
trusty
Fixed 3.13.0-142.191
released
linux-aws
noble
not-affected
jammy
not-affected
focal
not-affected
cosmic
not-affected
bionic
not-affected
artful
dne
zesty
dne
xenial
Fixed 4.4.0-1028.37
released
trusty
not-affected
linux-aws-5.15
noble
dne
jammy
dne
focal
not-affected
bionic
dne
xenial
dne
trusty
dne
linux-aws-5.4
noble
dne
jammy
dne
focal
dne
bionic
not-affected
xenial
dne
trusty
dne
linux-aws-fips
noble
dne
jammy
dne
focal
dne
bionic
dne
xenial
ignored
trusty
dne
linux-aws-hwe
noble
dne
jammy
dne
focal
dne
bionic
dne
xenial
not-affected
trusty
dne
linux-azure
noble
not-affected
jammy
not-affected
focal
not-affected
cosmic
not-affected
bionic
not-affected
artful
dne
zesty
dne
xenial
not-affected
trusty
not-affected
linux-azure-4.15
noble
dne
jammy
dne
focal
dne
bionic
not-affected
xenial
dne
trusty
dne
linux-azure-5.15
noble
dne
jammy
dne
focal
not-affected
bionic
dne
xenial
dne
trusty
dne
linux-azure-5.4
noble
dne
jammy
dne
focal
dne
bionic
not-affected
xenial
dne
trusty
dne
linux-azure-fde
noble
dne
jammy
not-affected
focal
ignored
bionic
dne
xenial
dne
trusty
dne
linux-azure-fde-5.15
noble
dne
jammy
dne
focal
not-affected
bionic
dne
xenial
dne
trusty
dne
linux-azure-fips
noble
dne
jammy
dne
focal
dne
bionic
dne
xenial
ignored
trusty
dne
linux-bluefield
noble
dne
jammy
dne
focal
not-affected
bionic
dne
xenial
dne
trusty
dne
linux-euclid
cosmic
dne
bionic
dne
artful
dne
zesty
dne
xenial
ignored
trusty
dne
linux-fips
noble
dne
jammy
dne
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-flo
cosmic
dne
bionic
dne
artful
dne
zesty
dne
xenial
ignored
trusty
dne
linux-gcp
noble
not-affected
jammy
not-affected
focal
not-affected
cosmic
not-affected
bionic
not-affected
artful
dne
zesty
dne
xenial
Fixed 4.13.0-1002.5
released
trusty
dne
linux-gcp-4.15
noble
dne
jammy
dne
focal
dne
bionic
not-affected
xenial
dne
trusty
dne
linux-gcp-5.15
noble
dne
jammy
dne
focal
not-affected
bionic
dne
xenial
dne
trusty
dne
linux-gcp-5.4
noble
dne
jammy
dne
focal
dne
bionic
not-affected
xenial
dne
trusty
dne
linux-gcp-fips
noble
dne
jammy
dne
focal
dne
bionic
dne
xenial
ignored
trusty
dne
linux-gke
noble
not-affected
jammy
not-affected
focal
ignored
cosmic
dne
bionic
dne
artful
dne
zesty
dne
xenial
Fixed 4.4.0-1024.24
released
trusty
dne
linux-gkeop
noble
dne
jammy
not-affected
focal
not-affected
bionic
dne
xenial
dne
trusty
dne
linux-gkeop-5.15
noble
dne
jammy
dne
focal
not-affected
bionic
dne
xenial
dne
trusty
dne
linux-goldfish
cosmic
dne
bionic
dne
artful
dne
zesty
ignored
xenial
ignored
trusty
dne
linux-grouper
cosmic
dne
bionic
dne
artful
dne
zesty
dne
xenial
dne
trusty
dne
linux-hwe
noble
dne
jammy
dne
focal
dne
cosmic
dne
bionic
not-affected
artful
dne
zesty
dne
xenial
Fixed 4.13.0-32.35~16.04.1
released
trusty
dne
linux-hwe-5.15
noble
dne
jammy
dne
focal
not-affected
bionic
dne
xenial
dne
trusty
dne
linux-hwe-5.4
noble
dne
jammy
dne
focal
dne
bionic
not-affected
xenial
dne
trusty
dne
linux-hwe-6.8
noble
dne
jammy
not-affected
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-hwe-edge
noble
dne
jammy
dne
focal
dne
cosmic
dne
bionic
not-affected
artful
dne
zesty
dne
xenial
Fixed 4.13.0-26.29~16.04.2
released
trusty
dne
linux-ibm
noble
not-affected
jammy
not-affected
focal
not-affected
bionic
dne
xenial
dne
trusty
dne
linux-ibm-5.15
noble
dne
jammy
dne
focal
not-affected
bionic
dne
xenial
dne
trusty
dne
linux-ibm-5.4
noble
dne
jammy
dne
focal
dne
bionic
not-affected
xenial
dne
trusty
dne
linux-intel
noble
not-affected
jammy
dne
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-intel-iot-realtime
noble
dne
jammy
dne
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-intel-iotg
noble
dne
jammy
not-affected
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-intel-iotg-5.15
noble
dne
jammy
dne
focal
not-affected
bionic
dne
xenial
dne
trusty
dne
linux-iot
noble
dne
jammy
dne
focal
not-affected
bionic
dne
xenial
dne
trusty
dne
linux-kvm
noble
dne
jammy
not-affected
focal
not-affected
cosmic
not-affected
bionic
not-affected
artful
dne
zesty
dne
xenial
not-affected
trusty
dne
linux-lowlatency
noble
not-affected
jammy
not-affected
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-lowlatency-hwe-5.15
noble
dne
jammy
dne
focal
not-affected
bionic
dne
xenial
dne
trusty
dne
linux-lowlatency-hwe-6.8
noble
dne
jammy
not-affected
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-lts-quantal
cosmic
dne
bionic
dne
artful
dne
zesty
dne
xenial
dne
trusty
dne
linux-lts-raring
cosmic
dne
bionic
dne
artful
dne
zesty
dne
xenial
dne
trusty
dne
linux-lts-saucy
cosmic
dne
bionic
dne
artful
dne
zesty
dne
xenial
dne
trusty
dne
linux-lts-trusty
cosmic
dne
bionic
dne
artful
dne
zesty
dne
xenial
dne
trusty
dne
linux-lts-utopic
cosmic
dne
bionic
dne
artful
dne
zesty
dne
xenial
dne
trusty
dne
linux-lts-vivid
cosmic
dne
bionic
dne
artful
dne
zesty
dne
xenial
dne
trusty
ignored
linux-lts-wily
cosmic
dne
bionic
dne
artful
dne
zesty
dne
xenial
dne
trusty
dne
linux-lts-xenial
noble
dne
jammy
dne
focal
dne
cosmic
dne
bionic
dne
artful
dne
zesty
dne
xenial
dne
trusty
Fixed 4.4.0-89.112~14.04.1
released
linux-maguro
cosmic
dne
bionic
dne
artful
dne
zesty
dne
xenial
dne
trusty
dne
linux-mako
cosmic
dne
bionic
dne
artful
dne
zesty
dne
xenial
ignored
trusty
dne
linux-manta
cosmic
dne
bionic
dne
artful
dne
zesty
dne
xenial
dne
trusty
dne
linux-nvidia
noble
not-affected
jammy
not-affected
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-nvidia-6.5
noble
dne
jammy
not-affected
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-nvidia-6.8
noble
dne
jammy
not-affected
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-nvidia-lowlatency
noble
not-affected
jammy
dne
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-oem
noble
dne
jammy
dne
focal
dne
cosmic
not-affected
bionic
not-affected
artful
dne
zesty
dne
xenial
not-affected
trusty
dne
linux-oem-6.8
noble
not-affected
jammy
dne
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-oracle
noble
not-affected
jammy
not-affected
focal
not-affected
bionic
not-affected
xenial
not-affected
trusty
dne
linux-oracle-5.15
noble
dne
jammy
dne
focal
not-affected
bionic
dne
xenial
dne
trusty
dne
linux-oracle-5.4
noble
dne
jammy
dne
focal
dne
bionic
not-affected
xenial
dne
trusty
dne
linux-raspi
noble
not-affected
jammy
not-affected
focal
not-affected
bionic
dne
xenial
dne
trusty
dne
linux-raspi-5.4
noble
dne
jammy
dne
focal
dne
bionic
not-affected
xenial
dne
trusty
dne
linux-raspi-realtime
noble
dne
jammy
dne
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-raspi2
noble
dne
jammy
dne
focal
ignored
cosmic
not-affected
bionic
not-affected
artful
not-affected
zesty
ignored
xenial
Fixed 4.4.0-1067.75
released
trusty
dne
linux-realtime
noble
dne
jammy
ignored
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-riscv
noble
not-affected
jammy
ignored
focal
ignored
bionic
dne
xenial
dne
trusty
dne
linux-riscv-5.15
noble
dne
jammy
dne
focal
not-affected
bionic
dne
xenial
dne
trusty
dne
linux-riscv-6.8
noble
dne
jammy
not-affected
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-snapdragon
noble
dne
jammy
dne
focal
dne
cosmic
dne
bionic
not-affected
artful
not-affected
zesty
ignored
xenial
Fixed 4.4.0-1069.74
released
trusty
dne
linux-xilinx-zynqmp
noble
dne
jammy
not-affected
focal
not-affected
bionic
dne
xenial
dne
trusty
dne
Common Weakness Enumeration
References
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2638fd0f92d4397884fd991d8f4925cb3f081901
http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00008.html
http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00013.html
http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00015.html
http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00038.html
http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00047.html
http://lists.opensuse.org/opensuse-security-announce/2018-03/msg00030.html
http://lists.opensuse.org/opensuse-security-announce/2018-03/msg00067.html
http://lists.opensuse.org/opensuse-security-announce/2018-03/msg00070.html
http://lists.opensuse.org/opensuse-security-announce/2018-03/msg00072.html
http://lists.opensuse.org/opensuse-security-announce/2018-04/msg00014.html
http://patchwork.ozlabs.org/patch/746618/
http://www.securityfocus.com/bid/102367
http://www.ubuntu.com/usn/USN-3583-1
http://www.ubuntu.com/usn/USN-3583-2
https://access.redhat.com/errata/RHSA-2018:0676
https://access.redhat.com/errata/RHSA-2018:1062
https://access.redhat.com/errata/RHSA-2018:1130
https://access.redhat.com/errata/RHSA-2018:1170
https://access.redhat.com/errata/RHSA-2018:1319
https://access.redhat.com/errata/RHSA-2018:1737
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1739765
https://github.com/torvalds/linux/commit/2638fd0f92d4397884fd991d8f4925cb3f081901
https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0
https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html
https://lkml.org/lkml/2017/4/2/13
https://support.f5.com/csp/article/K18352029
https://usn.ubuntu.com/3583-1/
https://usn.ubuntu.com/3583-2/
https://www.arista.com/en/support/advisories-notices/security-advisories/4577-security-advisory-34
https://www.debian.org/security/2018/dsa-4187
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.36
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2638fd0f92d4397884fd991d8f4925cb3f081901
http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00008.html
http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00013.html
http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00015.html
http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00038.html
http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00047.html
http://lists.opensuse.org/opensuse-security-announce/2018-03/msg00030.html
http://lists.opensuse.org/opensuse-security-announce/2018-03/msg00067.html
http://lists.opensuse.org/opensuse-security-announce/2018-03/msg00070.html
http://lists.opensuse.org/opensuse-security-announce/2018-03/msg00072.html
http://lists.opensuse.org/opensuse-security-announce/2018-04/msg00014.html
http://patchwork.ozlabs.org/patch/746618/
http://www.securityfocus.com/bid/102367
http://www.ubuntu.com/usn/USN-3583-1
http://www.ubuntu.com/usn/USN-3583-2
https://access.redhat.com/errata/RHSA-2018:0676
https://access.redhat.com/errata/RHSA-2018:1062
https://access.redhat.com/errata/RHSA-2018:1130
https://access.redhat.com/errata/RHSA-2018:1170
https://access.redhat.com/errata/RHSA-2018:1319
https://access.redhat.com/errata/RHSA-2018:1737
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1739765
https://github.com/torvalds/linux/commit/2638fd0f92d4397884fd991d8f4925cb3f081901
https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0
https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html
https://lkml.org/lkml/2017/4/2/13
https://security.netapp.com/advisory/ntap-20250103-0010/
https://support.f5.com/csp/article/K18352029
https://usn.ubuntu.com/3583-1/
https://usn.ubuntu.com/3583-2/
https://www.arista.com/en/support/advisories-notices/security-advisories/4577-security-advisory-34
https://www.debian.org/security/2018/dsa-4187
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.36