PT-2017-2223 · Linux +5 · Linux Kernel +5

🗓️ 19 May 2017 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 6 Views

Linux kernels before 4.11.1 mishandle sctp six create accept sk inheritance, enabling local DoS; upgrade to 4.11.1+.

Reporter	Title	Published	Views	Family All 9047
IBM Security Bulletins	Security Bulletin: IBM QRadar Network Packet Capture is vulnerable to 3RD PARTY CPU hardware utilizing speculative execution cache timing side-channel analysis known as Variant 4 or SpectreNG (CVE-2018-3639, CVE-2018-3640)	24 Jan 201912:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Network Security is affected by vulnerabilities in Linux kernel	16 Jun 201822:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Network Security is affected by Linux kernel vulnerabilities	25 Jul 201814:35	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in the Linux Kernel affect PowerKVM	17 Dec 201814:20	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Kernel affect Power Hardware Management Console	22 Sep 202123:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM API Connect has addressed multiple vulnerabilities in Developer Portal's dependencies - Cumulative list from June 28, 2018 to December 13, 2018	28 Jan 201917:05	–	ibm
IBM Security Bulletins	Security Bulletin: This Power Hardware Management Console (HMC) update is being released to address Common Vulnerabilities and Exposures issue numbers CVE-2017-5715, CVE-2017-5753 and CVE-2017-5754 (known as Spectre and Meltdown).	23 Sep 202101:45	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in the Linux Kernel affect PowerKVM	18 Jun 201801:34	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in the Linux kernel affect IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products	29 Mar 202301:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by Using Components with Known Vulnerabilities	16 Jun 201822:03	–	ibm

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/solaris/local/rsh_stack_clash_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/af_packet_packet_set_ring_priv_esc.rb
github	www.github.com/qazbnm456/awesome-cve-poc/blob/master/Stack-Clash.md
github	www.github.com/xairy/kernel-exploits/tree/master/CVE-2017-7308
github	www.github.com/hardenedlinux/offensive_poc/tree/master/CVE-2017-8890
github	www.github.com/thinkycx/CVE-2017-8890
github	www.github.com/beraphin/CVE-2017-8890
github	www.github.com/mmxsrup/CVE-2018-3639
github	www.github.com/RicterZ/PIE-Stack-Clash-CVE-2017-1000253
github	www.github.com/torvalds/linux/commit/fdcee2cbb8438702ea1b328fb6e0ac5e9a40c7f8

24 Feb 2023 00:00Current

7.7High risk

Vulners AI Score7.7

CVSS 3.17.8 - 9.8

CVSS 210

CVSS 37.1 - 8.4

EPSS0.60631