peter bassill · operator
$ cve CVE-2017-18017 JSON

CVE-2017-18017

9.8
CRITICAL · CVSS 3.1 · EPSS 52.8% (pctl 99)

Patch early

EPSS 52.8% — above the 10% action threshold.

Description

The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service (use-after-free and memory corruption) or possibly have unspecified other impact by leveraging the presence of xt_TCPMSS in an iptables action.

Scoring

CVSS9.8 (CRITICAL, v3.1)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS52.84% — more likely to be exploited than 99% of all CVEs
WeaknessCWE-416
On CISA KEVno
Public exploitnone known
Published2018-01-03
Last modified2026-06-17

Affected (29)

VendorProduct
aristaeos
canonicalubuntu linux
debiandebian linux
f5arx
linuxlinux kernel
openstackcloud magnum orchestration
opensuseleap
redhatenterprise linux desktop
redhatenterprise linux eus
redhatenterprise linux for real time
redhatenterprise linux for real time for nfv
redhatenterprise linux server
redhatenterprise linux server aus
redhatenterprise linux server tus
redhatenterprise linux workstation
redhatmrg realtime
susecaas platform
suselinux enterprise debuginfo
suselinux enterprise desktop
suselinux enterprise high availability
suselinux enterprise high availability extension
suselinux enterprise live patching
suselinux enterprise module for public cloud
suselinux enterprise point of sale
suselinux enterprise real time extension
suselinux enterprise server
suselinux enterprise software development kit
suselinux enterprise workstation extension
suseopenstack cloud

References

→ the Explorer  ·  watch your stack  ·  NVD