Linux Kernel Local Denial of Service Vulnerability (CVE-2017-17807)

Linux Kernel Local Denial of Service Vulnerability (CVE-2017-17807)
Linux Kernel Local Denial of Service Vulnerability (CVE-2017-17807)

Release date:
Updated on:

Affected Systems:

Linux kernel <4.14.6

Description:

Bugtraq id: 102301
CVE (CAN) ID: CVE-2017-17807

Linux Kernel is the Kernel of the Linux operating system.

In versions earlier than Linux kernel 4.14.6, the KEYS subsystem lacks access control check, which allows local users to exploit this vulnerability to cause DOS.

<* Source: vendor
*>

Suggestion:

Vendor patch:

Linux
-----
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.kernel.org/
Https://bugzilla.redhat.com/show_bug.cgi? Id = 1528335
Https://access.redhat.com/security/cve/cve-2017-17807
Https://www.debian.org/security/2017/dsa-4073
Https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit? Id = 4dca6ea1d9432052afb06baf2e3ae78188a4410b
Https://github.com/torvalds/linux/commit/4dca6ea1d9432052afb06baf2e3ae78188a4410b