Search/CVE-2017-18017
● CVE — Critical

CVE-2017-18017

Vendordebian, suse, linux, canonical, redhatProductdebian linux, linux enterprise desktop, linux enterprise server, linux enterprise software development kit, linux kernel, ubuntu linux, enterprise linux eus, eos, arx, cloud magnum orchestration, leap, enterprise linux desktop, enterprise linux for real time, enterprise linux for real time for nfv, mrg realtime, caas platform, linux enterprise debuginfo, linux enterprise high availability, linux enterprise high availability extension, linux enterprise live patching, linux enterprise module for public cloud, linux enterprise point of sale, linux enterprise real time extension, linux enterprise workstation extension, openstack cloudDiscoveredJan 3, 2018UpdatedJan 3, 2025

The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service (use-after-free and memory corruption) or possibly have unspecified other impact by leveraging the presence of xt_TCPMSS in an iptables action.

CVSS v3.1
9.8 CRITICAL
EPSS
52.8%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage