CVE-2017-5986

2017-02-1800:00:00

ubuntu.com

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

7.1 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

0.001 Low

EPSS

Percentile

34.5%

JSON

Race condition in the sctp_wait_for_sndbuf function in net/sctp/socket.c in
the Linux kernel before 4.9.11 allows local users to cause a denial of
service (assertion failure and panic) via a multithreaded application that
peels off an association in a certain buffer-full state.

Notes

Author	Note
jdstrand	android kernels (flo, goldfish, grouper, maguro, mako and manta) are not supported on the Ubuntu Touch 14.10 and earlier preview kernels linux-lts-saucy no longer receives official support linux-lts-quantal no longer receives official support
sbeattie	introduces CVE-2017-6353, which is fixed by dfcb9f4f99f1e9a49e43398a7bfbf56927544af1

OSVersionArchitecturePackageVersionFilename
ubuntu14.04noarchlinux< 3.13.0-117.164UNKNOWN
ubuntu16.04noarchlinux< 4.4.0-75.96UNKNOWN
ubuntu16.10noarchlinux< 4.8.0-49.52UNKNOWN
ubuntu16.04noarchlinux-aws< 4.4.0-1016.25UNKNOWN
ubuntu16.04noarchlinux-gke< 4.4.0-1012.12UNKNOWN
ubuntu16.04noarchlinux-hwe< 4.8.0-49.52~16.04.1UNKNOWN
ubuntu16.04noarchlinux-hwe-edge< 4.8.0-49.52~16.04.1UNKNOWN
ubuntu12.04noarchlinux-lts-trusty< 3.13.0-117.164~precise1UNKNOWN
ubuntu14.04noarchlinux-lts-xenial< 4.4.0-75.96~14.04.1UNKNOWN
ubuntu16.04noarchlinux-raspi2< 4.4.0-1054.61UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	14.04	noarch	linux	< 3.13.0-117.164	UNKNOWN
ubuntu	16.04	noarch	linux	< 4.4.0-75.96	UNKNOWN
ubuntu	16.10	noarch	linux	< 4.8.0-49.52	UNKNOWN
ubuntu	16.04	noarch	linux-aws	< 4.4.0-1016.25	UNKNOWN
ubuntu	16.04	noarch	linux-gke	< 4.4.0-1012.12	UNKNOWN
ubuntu	16.04	noarch	linux-hwe	< 4.8.0-49.52~16.04.1	UNKNOWN
ubuntu	16.04	noarch	linux-hwe-edge	< 4.8.0-49.52~16.04.1	UNKNOWN
ubuntu	12.04	noarch	linux-lts-trusty	< 3.13.0-117.164~precise1	UNKNOWN
ubuntu	14.04	noarch	linux-lts-xenial	< 4.4.0-75.96~14.04.1	UNKNOWN
ubuntu	16.04	noarch	linux-raspi2	< 4.4.0-1054.61	UNKNOWN