Lucene search

K
f5F5F5:K81158013
HistoryFeb 23, 2018 - 12:00 a.m.

K81158013 : Linux kernel vulnerability CVE-2017-16939

2018-02-2300:00:00
my.f5.com
48

7.4 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

0.4%

Security Advisory Description

The XFRM dump policy implementation in net/xfrm/xfrm_user.c in the Linux kernel before 4.13.11 allows local users to gain privileges or cause a denial of service (use-after-free) via a crafted SO_RCVBUF setsockopt system call in conjunction with XFRM_MSG_GETPOLICY Netlink messages. (CVE-2017-16939)

Impact

There is no impact; F5 products are not affected by this vulnerability.