The packet_set_ring function in net/packet/af_packet.c in the Linux kernel through 4.10.6 does not properly validate certain block-size data, which allows local users to cause a denial of service (overflow) or possibly have unspecified other impact via crafted system calls. (CVE-2017-7308)
Impact
There is no impact; F5 products are not affected by this vulnerability.

CPENameOperatorVersion
big-ip afmeq11.4.0
big-ip afmeq11.4.1
big-ip afmeq11.5.0
big-ip afmeq11.5.1
big-ip afmeq11.5.2
big-ip afmeq11.5.3
big-ip afmeq11.5.4
big-ip afmeq11.6.0
big-ip afmeq11.6.1
big-ip afmeq12.0.0

Name	Operator	Version
big-ip afm	eq	11.4.0
big-ip afm	eq	11.4.1
big-ip afm	eq	11.5.0
big-ip afm	eq	11.5.1
big-ip afm	eq	11.5.2
big-ip afm	eq	11.5.3
big-ip afm	eq	11.5.4
big-ip afm	eq	11.6.0
big-ip afm	eq	11.6.1
big-ip afm	eq	12.0.0

Rows per page:

1-10 of 1631

oraclelinux 10

redhatcve 2

metasploit 1

exploitpack 2

hackerone 1

suse 30

nessus 53

cve 1

ubuntucve 1

zdt 3

ubuntu 2

seebug 1

prion 1

cloudfoundry 1

debiancve 1

openvas 11

packetstorm 1

veracode 1

virtuozzo 1

exploitdb 3

threatpost 1

photon 3

fedora 2

googleprojectzero 1

redhat 4

centos 2

amazon 1

mageia 3

osv 1

ibm 2

kitploit 1

debian 1

androidsecurity 1

oraclelinux

Unbreakable Enterprise kernel security update

2017-06-01 00:00:00

Unbreakable Enterprise kernel security update

2017-06-01 00:00:00

kernel security, bug fix, and enhancement update

2017-05-26 00:00:00

redhatcve

CVE-2017-7308

2019-10-25 00:24:39

CVE-2021-22600

2022-01-28 20:58:25

metasploit

AF_PACKET packet_set_ring Privilege Escalation

2018-04-28 01:40:17

exploitpack

Linux Kernel 4.8.0-34 4.8.0-45 (Ubuntu Linux Mint) - Packet Socket Local Privilege Escalation

2018-12-29 00:00:00

Linux Kernel 4.8.0-41-generic (Ubuntu) - Packet Socket Local Privilege Escalation

2017-05-11 00:00:00

hackerone

Internet Bug Bounty: Linux kernel: CVE-2017-7308: a signedness issue in AF_PACKET sockets

2019-08-29 13:48:44

suse

Security update for Linux Kernel Live Patch 16 for SLE 12 (important)

2017-05-15 21:24:09

Security update for Linux Kernel Live Patch 15 for SLE 12 (important)

2017-05-15 21:32:37

Security update for Linux Kernel Live Patch 19 for SLE 12 (important)

2017-05-15 21:45:05

nessus

SUSE SLES12 Security Update : kernel (SUSE-SU-2017:1291-1)

2017-05-16 00:00:00

SUSE SLES12 Security Update : kernel (SUSE-SU-2017:1287-1)

2017-05-16 00:00:00

SUSE SLES12 Security Update : kernel (SUSE-SU-2017:1278-1)

2017-05-16 00:00:00

cve

CVE-2017-7308

2017-03-29 20:59:00

ubuntucve

CVE-2017-7308

2017-03-29 00:00:00

zdt

Linux Kernel 4.8.0-34 < 4.8.0-45 (Ubuntu / Linux Mint) - Packet Socket Local Privilege Escalation

2019-07-26 00:00:00

Linux Kernel 4.8.0 - Packet Socket Local root Privilege Escalation Exploit

2017-05-12 00:00:00

Linux 4.8.0 < 4.8.0-46 - AF_PACKET packet_set_ring Privilege Escalation Exploit

2018-05-18 00:00:00

ubuntu

Linux kernel vulnerability

2017-04-05 00:00:00

Linux kernel (HWE) vulnerability

2017-04-05 00:00:00

seebug

Linux kernel Local Denial of Service Vulnerability (CVE-2017-7308 )

2017-05-11 00:00:00

prion

Integer overflow

2017-03-29 20:59:00

cloudfoundry

USN-3256-2: Linux kernel (HWE) vulnerability | Cloud Foundry

2017-04-12 00:00:00

debiancve

CVE-2017-7308

2017-03-29 20:59:00

openvas

Ubuntu Update for linux USN-3256-1

2017-04-06 00:00:00

Ubuntu Update for linux-hwe USN-3256-2

2017-04-06 00:00:00

Fedora Update for kernel FEDORA-2017-8e7549fb91

2017-04-18 00:00:00

packetstorm

AF_PACKET packet_set_ring Privilege Escalation

2018-05-17 00:00:00

veracode

Out-Of-Bounds Write

2019-05-02 06:11:33

virtuozzo

Kernel security update: Virtuozzo ReadyKernel patch 17.0 for kernels 3.10.0-327.18.2.vz7.15.2 (Virtuozzo 7.0.0), 3.10.0-327.36.1.vz7.18.7 (Virtuozzo 7.0.1), and 3.10.0-327.36.1.vz7.20.18 (Virtuozzo 7.0.3)

2017-04-04 00:00:00

exploitdb

Linux Kernel 4.8.0-41-generic (Ubuntu) - Packet Socket Local Privilege Escalation

2017-05-11 00:00:00

Linux Kernel 4.8.0-34 < 4.8.0-45 (Ubuntu / Linux Mint) - Packet Socket Local Privilege Escalation

2018-12-29 00:00:00

Linux 4.8.0 < 4.8.0-46 - AF_PACKET packet_set_ring Privilege Escalation (Metasploit)

2018-05-18 00:00:00

threatpost

RSAC 2019: Container Escape Hack Targets Vulnerable Linux Kernel

2019-03-04 13:30:17

photon

Important Photon OS Security Update - PHSA-2017-0041

2017-05-11 00:00:00

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2017-0011

2017-04-14 00:00:00

Critical Photon OS Security Update - PHSA-2018-0031

2018-03-29 00:00:00

fedora

[SECURITY] Fedora 25 Update: kernel-4.10.10-200.fc25

2017-04-17 20:54:22

[SECURITY] Fedora 24 Update: kernel-4.10.10-100.fc24

2017-04-17 20:54:45

googleprojectzero

Exploiting the Linux kernel via packet sockets

2017-05-10 00:00:00

redhat

(RHSA-2017:1297) Important: kernel-rt security and bug fix update

2017-05-25 13:15:44

(RHSA-2017:1298) Important: kernel-rt security and bug fix update

2017-05-25 13:21:34

(RHSA-2017:1308) Important: kernel security, bug fix, and enhancement update

2017-05-25 13:27:24

centos

kernel, perf, python security update

2017-05-26 02:33:51

kernel, perf, python security update

2018-06-21 11:55:42

amazon

Important: kernel

2017-05-10 17:06:00

mageia

Updated kernel packages fixes security vulnerabilities

2017-05-10 23:47:44

Updated kernel-tmb packages fixes security vulnerabilities

2017-05-26 09:54:58

Updated kernel-linus packages fixes security vulnerabilities

2017-05-26 09:54:58

osv

linux - security update

2017-04-28 00:00:00

ibm

Security Bulletin: IBM QRadar Network Security is affected by vulnerabilities in Linux kernel

2018-06-16 22:02:59

Security Bulletin: Vulnerabilities in the Linux kernel affect PowerKVM

2018-06-18 01:38:07

kitploit

Kernelpop - Kernel Privilege Escalation Enumeration And Exploitation Framework

2017-11-04 13:30:00

debian

[SECURITY] [DLA 922-1] linux security update

2017-04-28 12:39:18

androidsecurity

Android Security Bulletin—July 2017

2017-07-05 00:00:00

Products

Security Intelligence
Non-intrusive assessment
Developers SDK
Windows scanner
Linux scanner
Perimeter control tool
MSSP

Database

Vulnerabilities
Exploits
IOC
Security News
BugBounty
Popular
Wild Exploited
Top Vulnerabilities

Tools

Linux Security Scanner
API integration
Subscriptions
Plugins
Manual Audit

Learn More

Stats
API
Docs
Api-keys
License
Pricing
Glossary
FAQ

Company

Blog
Contacts
About Us
OpenSource
EULA
Brand Guideline
Privacy Policy

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply. All product names, logos, and brands are property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, logos, and brands does not imply endorsement.If you are an owner of some content and want it to be removed, please contact us. Using Vulners services you are accepting Vulners services end-user license agreement

@2024 Vulners Inc

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.7 High

AI Score

Confidence

High

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

37.1%

JSON

Related for F5:K82224417