CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2017-18017
Critical (9.8). EPSS 53% chance of exploitation in the next 30 days.
The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service (use-after-free and memory corruption) or possibly have unspecified other impact by leveraging the presence of xt_TCPMSS in an iptables action.
Severity
- EPSS
- 53% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)
- CWE
- CWE-416
- Published
- Modified
- Record from
- the NVD, synced
Affected
- arista:eos
- canonical:ubuntu_linux
- debian:debian_linux
- f5:arx
- linux:linux_kernel
- openstack:cloud_magnum_orchestration
- opensuse:leap
- redhat:enterprise_linux_desktop
- redhat:enterprise_linux_eus
- redhat:enterprise_linux_for_real_time
- redhat:enterprise_linux_for_real_time_for_nfv
- redhat:enterprise_linux_server
- redhat:enterprise_linux_server_aus
- redhat:enterprise_linux_server_tus
- redhat:enterprise_linux_workstation
- redhat:mrg_realtime
- suse:caas_platform
- suse:linux_enterprise_debuginfo
- suse:linux_enterprise_desktop
- suse:linux_enterprise_high_availability
- suse:linux_enterprise_high_availability_extension
- suse:linux_enterprise_live_patching
- suse:linux_enterprise_module_for_public_cloud
- suse:linux_enterprise_point_of_sale
- suse:linux_enterprise_real_time_extension
- suse:linux_enterprise_server
- suse:linux_enterprise_software_development_kit
- suse:linux_enterprise_workstation_extension
- suse:openstack_cloud
References
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2638fd0f92d4397884fd991d8f4925cb3f081901
- http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00008.html
- http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00013.html
- http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00038.html