CVE-2017-5972

14.02.2017, 06:59

The TCP stack in the Linux kernel 3.x does not properly implement a SYN cookie protection mechanism for the case of a fast network connection, which allows remote attackers to cause a denial of service (CPU consumption) by sending many TCP SYN packets, as demonstrated by an attack against the kernel-3.10.0 package in CentOS Linux 7. NOTE: third parties have been unable to discern any relationship between the GitHub Engineering finding and the Trigemini.c attack code.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	7.5 HIGH	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
mitre	CNA	---				---
CVE	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 95%

Vendor	Product	Version
linux	linux_kernel	3.0.0 ≤ 𝑥 ≤ 3.19.8

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

linux

bullseye	5.10.223-1 fixed
jessie	ignored
wheezy	no-dsa
bullseye (security)	5.10.226-1 fixed
bookworm	6.1.106-3 fixed
bookworm (security)	6.1.112-1 fixed
sid	6.11.5-1 fixed
trixie	6.11.5-1 fixed

Ubuntu Releases

Ubuntu Product

Codename

linux

disco	not-affected
cosmic	not-affected
bionic	not-affected
artful	not-affected
zesty	not-affected
yakkety	not-affected
xenial	not-affected
trusty	ignored
precise	ignored

linux-armadaxp

disco	dne
cosmic	dne
bionic	dne
artful	dne
zesty	dne
yakkety	dne
xenial	dne
trusty	dne
precise	ignored

linux-aws

disco	not-affected
cosmic	not-affected
bionic	not-affected
artful	dne
zesty	dne
yakkety	dne
xenial	not-affected
trusty	not-affected
precise	dne

linux-aws-hwe

disco	dne
cosmic	dne
bionic	dne
xenial	not-affected
trusty	dne

linux-azure

disco	not-affected
cosmic	not-affected
bionic	not-affected
artful	dne
zesty	dne
yakkety	dne
xenial	not-affected
trusty	not-affected

linux-azure-edge

disco	dne
cosmic	dne
bionic	not-affected
xenial	not-affected
trusty	dne

linux-euclid

disco	dne
cosmic	dne
bionic	dne
artful	dne
zesty	dne
xenial	not-affected
trusty	dne

linux-flo

disco	dne
cosmic	dne
bionic	dne
artful	dne
zesty	dne
yakkety	ignored
xenial	ignored
trusty	dne
precise	dne

linux-gcp

disco	not-affected
cosmic	not-affected
bionic	not-affected
artful	dne
zesty	dne
yakkety	dne
xenial	not-affected
trusty	dne

linux-gcp-edge

disco	dne
cosmic	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-gke

disco	dne
cosmic	dne
bionic	not-affected
artful	dne
zesty	dne
yakkety	dne
xenial	not-affected
trusty	dne
precise	dne

linux-goldfish

disco	dne
cosmic	dne
bionic	dne
artful	dne
zesty	ignored
yakkety	ignored
xenial	ignored
trusty	dne
precise	dne

linux-grouper

disco	dne
cosmic	dne
bionic	dne
artful	dne
zesty	dne
yakkety	dne
xenial	dne
trusty	dne
precise	dne

linux-hwe

disco	dne
cosmic	dne
bionic	not-affected
artful	dne
zesty	dne
yakkety	dne
xenial	not-affected
trusty	dne
precise	dne

linux-hwe-edge

disco	dne
cosmic	dne
bionic	not-affected
artful	dne
zesty	dne
yakkety	dne
xenial	not-affected
trusty	dne
precise	dne

linux-kvm

disco	not-affected
cosmic	not-affected
bionic	not-affected
artful	dne
zesty	dne
xenial	not-affected
trusty	dne

linux-linaro-omap

disco	dne
cosmic	dne
bionic	dne
artful	dne
zesty	dne
yakkety	dne
xenial	dne
trusty	dne
precise	ignored

linux-linaro-shared

disco	dne
cosmic	dne
bionic	dne
artful	dne
zesty	dne
yakkety	dne
xenial	dne
trusty	dne
precise	ignored

linux-linaro-vexpress

disco	dne
cosmic	dne
bionic	dne
artful	dne
zesty	dne
yakkety	dne
xenial	dne
trusty	dne
precise	ignored

linux-lts-quantal

disco	dne
cosmic	dne
bionic	dne
artful	dne
zesty	dne
yakkety	dne
xenial	dne
trusty	dne
precise	ignored

linux-lts-raring

disco	dne
cosmic	dne
bionic	dne
artful	dne
zesty	dne
yakkety	dne
xenial	dne
trusty	dne
precise	ignored

linux-lts-saucy

disco	dne
cosmic	dne
bionic	dne
artful	dne
zesty	dne
yakkety	dne
xenial	dne
trusty	dne
precise	ignored

linux-lts-trusty

disco	dne
cosmic	dne
bionic	dne
artful	dne
zesty	dne
yakkety	dne
xenial	dne
trusty	dne
precise	ignored

linux-lts-utopic

disco	dne
cosmic	dne
bionic	dne
artful	dne
zesty	dne
yakkety	dne
xenial	dne
trusty	ignored
precise	dne

linux-lts-vivid

disco	dne
cosmic	dne
bionic	dne
artful	dne
zesty	dne
yakkety	dne
xenial	dne
trusty	ignored
precise	dne

linux-lts-wily

disco	dne
cosmic	dne
bionic	dne
artful	dne
zesty	dne
yakkety	dne
xenial	dne
trusty	ignored
precise	dne

linux-lts-xenial

disco	dne
cosmic	dne
bionic	dne
artful	dne
zesty	dne
yakkety	dne
xenial	dne
trusty	not-affected
precise	dne

linux-maguro

disco	dne
cosmic	dne
bionic	dne
artful	dne
zesty	dne
yakkety	dne
xenial	dne
trusty	dne
precise	dne

linux-mako

disco	dne
cosmic	dne
bionic	dne
artful	dne
zesty	dne
yakkety	ignored
xenial	ignored
trusty	dne
precise	dne

linux-manta

disco	dne
cosmic	dne
bionic	dne
artful	dne
zesty	dne
yakkety	dne
xenial	dne
trusty	dne
precise	dne

linux-oem

disco	not-affected
cosmic	not-affected
bionic	not-affected
artful	dne
zesty	dne
xenial	not-affected
trusty	dne

linux-oracle

disco	not-affected
cosmic	not-affected
bionic	not-affected
xenial	not-affected
trusty	dne

linux-qcm-msm

disco	dne
cosmic	dne
bionic	dne
artful	dne
zesty	dne
yakkety	dne
xenial	dne
trusty	dne
precise	ignored

linux-raspi2

disco	not-affected
cosmic	not-affected
bionic	not-affected
artful	not-affected
zesty	not-affected
yakkety	not-affected
xenial	not-affected
trusty	dne
precise	dne

linux-snapdragon

disco	not-affected
cosmic	dne
bionic	not-affected
artful	not-affected
zesty	not-affected
yakkety	not-affected
xenial	not-affected
trusty	dne
precise	dne

linux-ti-omap4

disco	dne
cosmic	dne
bionic	dne
artful	dne
zesty	dne
yakkety	dne
xenial	dne
trusty	dne
precise	ignored

Known Exploits!

Common Weakness Enumeration

CWE-400 - Uncontrolled Resource Consumption
The software does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

References

http://seclists.org/oss-sec/2017/q1/573

http://www.securityfocus.com/bid/96231

https://access.redhat.com/security/cve/cve-2017-5972

https://bugzilla.redhat.com/show_bug.cgi?id=1422081

https://cxsecurity.com/issue/WLB-2017020112

https://githubengineering.com/syn-flood-mitigation-with-synsanity/

https://packetstormsecurity.com/files/141083/CentOS7-Kernel-Denial-Of-Service.html

https://security-tracker.debian.org/tracker/CVE-2017-5972

https://www.exploit-db.com/exploits/41350/