Lucene search

K
prionPRIOn knowledge basePRION:CVE-2017-6074
HistoryFeb 18, 2017 - 9:59 p.m.

Double free

2017-02-1821:59:00
PRIOn knowledge base
www.prio-n.com
10

7.2 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

0.4%

The dccp_rcv_state_process function in net/dccp/input.c in the Linux kernel through 4.9.11 mishandles DCCP_PKT_REQUEST packet data structures in the LISTEN state, which allows local users to obtain root privileges or cause a denial of service (double free) via an application that makes an IPV6_RECVPKTINFO setsockopt system call.

References