Linux Kernel kernel/bpf/verifier. clocal Denial of Service Vulnerability (CVE-2017-17863)
Linux Kernel kernel/bpf/verifier. clocal Denial of Service Vulnerability (CVE-2017-17863)
Release date:
Updated on:
Affected Systems:
Linux kernel 4.9.x-4.9.71
Description:
Bugtraq id: 102321
CVE (CAN) ID: CVE-2017-17863
Linux Kernel is the Kernel of the Linux operating system.
Linux kernel 4.9.x-4.9.71, kernel/bpf/verifier. c does not check the relationship between pointer values and BPF stacks, so that local users can exploit this vulnerability to cause DoS (integer overflow or invalid memory access ).
<* Source: Jann Horn
*>
Suggestion:
Vendor patch:
Linux
-----
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:
Https://www.spinics.net/lists/stable/msg206985.html
Https://bugzilla.redhat.com/show_bug.cgi? Id = 1529123
Https://access.redhat.com/security/cve/cve-2017-17863
Http://www.kernel.org/
Https://anonscm.debian.org/cgit/kernel/linux.git/tree/debian/patches/bugfix/all/bpf-reject-out-of-bounds-stack-pointer-calculation.patch? H = stretch-security
Install Kernel 4.15 RC5 on Ubuntu, Linux Mint, and other derivative versions
Install Linux Kernel 4.9.26 on Ubuntu
Ubuntu 16.04.2 install Linux kernel 4.10 kernel and solve VMware Problems
Linux Kernel 4.2.2 compilation and installation tutorial
Ubuntu 15.10 will use the Linux Kernel 4.2 Kernel
Linux Kernel 5.0 will be released in the summer of 2018
Install Linux Kernel 4.10.1 In Ubuntu, Linuxmint, and derivative versions
Linux Kernel 4.15 will be released within two weeks. RC7 is released today
Linux Kernel: click here
Linux Kernel: click here