{
    "id": "CVE-2017-8824",
    "published": "2017-12-05 09:29:00",
    "last_modified": "2026-06-17 01:27:01",
    "cvss_score": "7.8",
    "cvss_severity": "HIGH",
    "cvss_version": "3.1",
    "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
    "cwe": "CWE-416",
    "description": "The dccp_disconnect function in net/dccp/proto.c in the Linux kernel through 4.14.3 allows local users to gain privileges or cause a denial of service (use-after-free) via an AF_UNSPEC connect system call during the DCCP_LISTEN state.",
    "epss_score": "0.01344",
    "epss_percentile": "0.70598",
    "kev": 0,
    "kev_due": null,
    "has_exploit": 1,
    "updated_at": "2026-10-11 18:17:16",
    "priority": {
        "rank": 2,
        "label": "Patch early",
        "why": "A public exploit exists."
    },
    "products": [
        {
            "vendor": "linux",
            "product": "linux_kernel"
        }
    ],
    "kev_detail": null,
    "exploits": [
        {
            "source": "exploit-db",
            "ref_id": "43234",
            "title": "Linux Kernel 4.10.5 / < 4.14.3 (Ubuntu) - DCCP Socket Use-After-Free",
            "date": "2017-12-07",
            "url": "https://www.exploit-db.com/exploits/43234"
        }
    ],
    "refs_list": [
        "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html",
        "http://lists.openwall.net/netdev/2017/12/04/224",
        "http://www.openwall.com/lists/oss-security/2017/12/05/1",
        "http://www.securityfocus.com/bid/102056",
        "https://access.redhat.com/errata/RHSA-2018:0399",
        "https://access.redhat.com/errata/RHSA-2018:0676",
        "https://access.redhat.com/errata/RHSA-2018:1062",
        "https://access.redhat.com/errata/RHSA-2018:1130",
        "https://access.redhat.com/errata/RHSA-2018:1170",
        "https://access.redhat.com/errata/RHSA-2018:1216",
        "https://access.redhat.com/errata/RHSA-2018:1319",
        "https://access.redhat.com/errata/RHSA-2018:3822",
        "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0",
        "https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html",
        "https://usn.ubuntu.com/3581-1/",
        "https://usn.ubuntu.com/3581-2/",
        "https://usn.ubuntu.com/3581-3/",
        "https://usn.ubuntu.com/3582-1/",
        "https://usn.ubuntu.com/3582-2/",
        "https://usn.ubuntu.com/3583-1/",
        "https://usn.ubuntu.com/3583-2/",
        "https://www.debian.org/security/2017/dsa-4073",
        "https://www.debian.org/security/2018/dsa-4082",
        "https://www.exploit-db.com/exploits/43234/",
        "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html"
    ]
}