CVE-2017-5897
The ip6gre_err function in net/ipv6/ip6_gre.c in the Linux kernel allows remote attackers to have unspecified impact via vectors involving GRE flags in an IPv6 packet, which trigger an out-of-bounds access.
| Software | From | Fixed in |
|---|---|---|
| linux / linux_kernel | 3.17 | 3.18.49 |
| linux / linux_kernel | 3.7 | 3.10.106 |
| linux / linux_kernel | 3.11 | 3.12.71 |
| linux / linux_kernel | 3.13 | 3.16.41 |
| linux / linux_kernel | 3.19 | 4.4.50 |
| linux / linux_kernel | 4.5 | 4.9.11 |
| canonical / ubuntu_linux | 14.04 | 14.04.x |
| debian / debian_linux | 8.0 | 8.0.x |
- http://www.debian.org/security/2017/dsa-3791
- http://www.openwall.com/lists/oss-security/2017/02/07/2
- http://www.securityfocus.com/bid/96037
- http://www.securitytracker.com/id/1037794
- https://git.kernel.org/pub/scm/linux/kernel/git/davem/net.git/commit/?id=7892032cfe67f4bde6fc2ee967e45a8fbaf33756
- https://source.android.com/security/bulletin/2017-09-01
- https://usn.ubuntu.com/3754-1/
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime