7.5
High
CVE-2017-2634 It was found that the Linux kernel's Datagram Congestion Control Protocol (DCCP) implementation before 2.6.22.17 used…
Description
It was found that the Linux kernel's Datagram Congestion Control Protocol (DCCP) implementation before 2.6.22.17 used the IPv4-only inet_sk_rebuild_header() function for both IPv4 and IPv6 DCCP connections, which could result in memory corruptions. A remote attacker could use this flaw to crash the system.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| kernel: | 2.6.22.17 | No fix stated |
References
- RHSA-2017:0323 rhn.redhat.com
- git.kernel.org git.kernel.org
- RHSA-2017:0347 rhn.redhat.com
- 1037909 www.securitytracker.com
- bugzilla.redhat.com bugzilla.redhat.com
- RHSA-2017:0346 rhn.redhat.com
- 96529 www.securityfocus.com
Timeline
- Published
- Last modified