Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2017-8797
HistoryJul 02, 2017 - 5:29 p.m.

CVE-2017-8797

2017-07-0217:29:00
CWE-129
mitre
web.nvd.nist.gov
115
nfsv4
linux kernel
cve-2017-8797
security vulnerability
dos
knfsd
soft-lockup

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.1

Confidence

High

EPSS

0.874

Percentile

98.7%

JSON

The NFSv4 server in the Linux kernel before 4.11.3 does not properly validate the layout type when processing the NFSv4 pNFS GETDEVICEINFO or LAYOUTGET operand in a UDP packet from a remote attacker. This type value is uninitialized upon encountering certain error conditions. This value is used as an array index for dereferencing, which leads to an OOPS and eventually a DoS of knfsd and a soft-lockup of the whole system.

Affected configurations

Nvd
Node
linuxlinux_kernelRange4.0–4.1.40
OR
linuxlinux_kernelRange4.2–4.4.70
OR
linuxlinux_kernelRange4.5–4.9.30
OR
linuxlinux_kernelRange4.11–4.11.3
VendorProductVersionCPE
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Related

redhatcve 1
prion 1
ubuntucve 1
virtuozzo 2
checkpoint_advisories 1
veracode 1
cvelist 1
debiancve 1
nvd 1
nessus 17
redhat 4
suse 8
oraclelinux 4
openvas 3
ibm 2
centos 1
photon 1
redhatcve
redhatcve
CVE-2017-8797
2017-06-29 13:19:25
prion
prion
Input validation
2017-07-02 17:29:00
ubuntucve
ubuntucve
CVE-2017-8797
2017-07-02 00:00:00
virtuozzo
virtuozzo
Important kernel security update: CVE-2017-8797 and other; Virtuozzo ReadyKernel patch 25.0 for Virtuozzo 7.0.0, 7.0.1, and 7.0.3
2017-07-05 00:00:00
Important kernel security update: CVE-2017-8797 and other; Virtuozzo ReadyKernel patch 25.0 for Virtuozzo 7.0.4 and 7.0.4 HF3
2017-07-05 00:00:00
checkpoint_advisories
checkpoint_advisories
Linux Kernel NFSv4 nfsd PNFS denial of Service (CVE-2017-8797)
2017-09-25 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-05-02 06:36:14
cvelist
cvelist
CVE-2017-8797
2017-07-02 17:00:00
debiancve
debiancve
CVE-2017-8797
2017-07-02 17:29:00
nvd
nvd
CVE-2017-8797
2017-07-02 17:29:00
nessus
nessus
Virtuozzo 7 : readykernel-patch (VZA-2017-062)
2017-07-06 00:00:00
Virtuozzo 7 : readykernel-patch (VZA-2017-063)
2017-07-06 00:00:00
RHEL 7 : kernel (RHSA-2017:2437)
2017-08-10 00:00:00
redhat
redhat
(RHSA-2017:2437) Important: kernel security and bug fix update
2017-08-08 14:58:24
(RHSA-2017:2669) Important: kernel-rt security and bug fix update
2017-09-06 20:24:03
(RHSA-2017:2077) Important: kernel-rt security, bug fix, and enhancement update
2017-08-01 05:57:19
suse
suse
Security update for Linux Kernel Live Patch 6 for SLE 12 SP2 (important)
2017-08-07 15:20:40
Security update for Linux Kernel Live Patch 9 for SLE 12 SP2 (important)
2017-08-07 15:16:21
Security update for Linux Kernel Live Patch 7 for SLE 12 SP2 (important)
2017-08-07 15:13:41
oraclelinux
oraclelinux
Unbreakable Enterprise kernel security update
2018-01-27 00:00:00
kernel security, bug fix, and enhancement update
2017-08-15 00:00:00
kernel security, bug fix, and enhancement update
2017-08-07 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-1482)
2020-01-23 00:00:00
Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-1504)
2020-01-23 00:00:00
RedHat Update for kernel RHSA-2017:1842-01
2017-08-04 00:00:00
ibm
ibm
Security Bulletin: IBM QRadar Network Security is affected by vulnerabilities in Linux kernel
2018-06-16 22:04:36
Security Bulletin: Vulnerabilities in the Linux kernel affect PowerKVM
2018-06-18 01:40:47
centos
centos
kernel, perf, python security update
2017-08-24 01:38:33
photon
photon
Critical Photon OS Security Update - PHSA-2018-0031
2018-03-29 00:00:00

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.1

Confidence

High

EPSS

0.874

Percentile

98.7%

JSON
Related for CVE-2017-8797
redhatcve1prion1ubuntucve1virtuozzo2checkpoint_advisories1veracode1cvelist1debiancve1nvd1nessus17redhat4suse8oraclelinux4openvas3ibm2centos1photon1