The IPv6 fragmentation implementation in the Linux kernel through 4.11.1 does not consider that the nexthdr field may be associated with an invalid option, which allows local users to cause a denial of service (out-of-bounds read and BUG) or possibly have unspecified other impact via crafted socket and send system calls. (CVE-2017-9074)

Impact

This vulnerability allows unauthorized disclosure of information, unauthorized modification, and disruption of service.

redhatcve 1

nessus 60

cvelist 1

prion 1

cve 1

nvd 1

veracode 1

ubuntucve 1

debiancve 1

redhat 4