CVE Feed

    Dashboard / CVE / CVE-2017-18017

    CVE-2017-18017

    The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service (use-after-free and memory corruption) or possibly have unspecified other impact by leveraging the presence of xt_TCPMSS in an iptables action.

    Published:Jan 3, 2018
    Last Modified:Jan 3, 2025
    EPS:Jan 3, 2018
    EPSS Score:0.38093
    CVSS Score:9.8

    Affected Products

    Vendor
    Arista
    Product
    Eos
    Vendor
    Canonical
    Product
    Ubuntu Linux
    Vendor
    Debian
    Product
    Debian Linux
    Vendor
    F5
    Product
    Arx
    Vendor
    Linux
    Product
    Linux Kernel
    Vendor
    Openstack
    Product
    Cloud Magnum Orchestration
    Vendor
    Opensuse
    Product
    Leap
    Vendor
    Redhat
    Product
    Enterprise Linux
    Vendor
    Redhat
    Product
    Enterprise Linux Desktop
    Vendor
    Redhat
    Product
    Enterprise Linux Eus
    Vendor
    Redhat
    Product
    Enterprise Linux For Real Time
    Vendor
    Redhat
    Product
    Enterprise Linux For Real Time For Nfv
    Vendor
    Redhat
    Product
    Enterprise Linux Server
    Vendor
    Redhat
    Product
    Enterprise Linux Server Aus
    Vendor
    Redhat
    Product
    Enterprise Linux Server Tus
    Vendor
    Redhat
    Product
    Enterprise Linux Workstation
    Vendor
    Redhat
    Product
    Enterprise Mrg
    Vendor
    Redhat
    Product
    Mrg Realtime
    Vendor
    Redhat
    Product
    Rhel Eus
    Vendor
    Redhat
    Product
    Rhel Extras Rt
    Vendor
    Suse
    Product
    Caas Platform
    Vendor
    Suse
    Product
    Linux Enterprise Debuginfo
    Vendor
    Suse
    Product
    Linux Enterprise Desktop
    Vendor
    Suse
    Product
    Linux Enterprise High Availability
    Vendor
    Suse
    Product
    Linux Enterprise High Availability Extension
    Vendor
    Suse
    Product
    Linux Enterprise Live Patching
    Vendor
    Suse
    Product
    Linux Enterprise Module For Public Cloud
    Vendor
    Suse
    Product
    Linux Enterprise Point Of Sale
    Vendor
    Suse
    Product
    Linux Enterprise Real Time Extension
    Vendor
    Suse
    Product
    Linux Enterprise Server
    Vendor
    Suse
    Product
    Linux Enterprise Software Development Kit
    Vendor
    Suse
    Product
    Linux Enterprise Workstation Extension
    Vendor
    Suse
    Product
    Openstack Cloud

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-2379 (CVSS 8.2) — On affected platforms with hardware IPSec support running Arista EOS with certain IPsec features enabled, EOS …
    CVE-2026-7473 (CVSS 6.9) — On affected platforms running Arista EOS where a tunnel decapsulation configuration—such as VXLAN (Virtual Ext…
    CVE-2025-8873 (CVSS 8.7) — On affected platforms running Arista EOS with IPsec configured, a specially crafted packet can cause the datap…
    CVE-2023-5502 (CVSS 8.2) — On affected platforms running Arista EOS with 802.1x authentication configured on the access/trunk ports, and …
    CVE-2024-27892 (CVSS 7.2) — Affected platforms running Arista EOS with OpenConfig configured, a gNMI Set request can be run when it should…
    CVE-2024-27890 (CVSS 7.2) — Affected platforms running Arista EOS with OpenConfig configured, a gNMI Set request can be run when it should…
    CVE-2024-27891 (CVSS 6.9) — On affected platforms running Arista EOS with MACsec and egress ACLs configured on the same interfaces, the AC…
    CVE-2024-6858 (CVSS 6.5) — In Arista’s EOS when in 802.1X mode, multi-auth unauthenticated hosts might be allowed access to a switch port…
    CVE-2025-7048 (CVSS 5.3) — On affected platforms running Arista EOS with MACsec configuration, a specially crafted packet can cause the M…
    CVE-2025-8872 (CVSS 7.1) — On affected platforms running Arista EOS with OSPFv3 configured, a specially crafted packet can cause the OSFP…

    References

    http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2638fd0f92d4397884fd991d8f4925cb3f081901
    http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00008.html
    http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00013.html
    http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00015.html
    http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00038.html
    http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00047.html
    http://lists.opensuse.org/opensuse-security-announce/2018-03/msg00030.html
    http://lists.opensuse.org/opensuse-security-announce/2018-03/msg00067.html
    http://lists.opensuse.org/opensuse-security-announce/2018-03/msg00070.html
    http://lists.opensuse.org/opensuse-security-announce/2018-03/msg00072.html
    http://lists.opensuse.org/opensuse-security-announce/2018-04/msg00014.html
    http://patchwork.ozlabs.org/patch/746618/
    http://www.securityfocus.com/bid/102367
    http://www.ubuntu.com/usn/USN-3583-1
    http://www.ubuntu.com/usn/USN-3583-2
    https://access.redhat.com/errata/RHSA-2018:0676
    https://access.redhat.com/errata/RHSA-2018:1062
    https://access.redhat.com/errata/RHSA-2018:1130
    https://access.redhat.com/errata/RHSA-2018:1170
    https://access.redhat.com/errata/RHSA-2018:1319
    https://access.redhat.com/errata/RHSA-2018:1737
    https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1739765
    https://github.com/torvalds/linux/commit/2638fd0f92d4397884fd991d8f4925cb3f081901
    https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0
    https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html
    https://lkml.org/lkml/2017/4/2/13
    https://support.f5.com/csp/article/K18352029
    https://usn.ubuntu.com/3583-1/
    https://usn.ubuntu.com/3583-2/
    https://www.arista.com/en/support/advisories-notices/security-advisories/4577-security-advisory-34
    https://www.debian.org/security/2018/dsa-4187
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.36
    http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2638fd0f92d4397884fd991d8f4925cb3f081901
    http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00008.html
    http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00013.html
    http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00015.html
    http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00038.html
    http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00047.html
    http://lists.opensuse.org/opensuse-security-announce/2018-03/msg00030.html
    http://lists.opensuse.org/opensuse-security-announce/2018-03/msg00067.html
    http://lists.opensuse.org/opensuse-security-announce/2018-03/msg00070.html
    http://lists.opensuse.org/opensuse-security-announce/2018-03/msg00072.html
    http://lists.opensuse.org/opensuse-security-announce/2018-04/msg00014.html
    http://patchwork.ozlabs.org/patch/746618/
    http://www.securityfocus.com/bid/102367
    http://www.ubuntu.com/usn/USN-3583-1
    http://www.ubuntu.com/usn/USN-3583-2
    https://access.redhat.com/errata/RHSA-2018:0676
    https://access.redhat.com/errata/RHSA-2018:1062
    https://access.redhat.com/errata/RHSA-2018:1130
    https://access.redhat.com/errata/RHSA-2018:1170
    https://access.redhat.com/errata/RHSA-2018:1319
    https://access.redhat.com/errata/RHSA-2018:1737
    https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1739765
    https://github.com/torvalds/linux/commit/2638fd0f92d4397884fd991d8f4925cb3f081901
    https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0
    https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html
    https://lkml.org/lkml/2017/4/2/13
    https://security.netapp.com/advisory/ntap-20250103-0010/
    https://support.f5.com/csp/article/K18352029
    https://usn.ubuntu.com/3583-1/
    https://usn.ubuntu.com/3583-2/
    https://www.arista.com/en/support/advisories-notices/security-advisories/4577-security-advisory-34
    https://www.debian.org/security/2018/dsa-4187
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.36

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High