CVE-2017-6074
Description
The dccp_rcv_state_process function in net/dccp/input.c in the Linux kernel
through 4.9.11 mishandles DCCP_PKT_REQUEST packet data structures in the
LISTEN state, which allows local users to obtain root privileges or cause a
denial of service (double free) via an application that makes an
IPV6_RECVPKTINFO setsockopt system call.
Ubuntu-Description
Andrey Konovalov discovered a use-after-free vulnerability in the DCCP
implementation in the Linux kernel. A local attacker could use this to
cause a denial of service (system crash) or possibly gain administrative
privileges.
Notes
sbeattie> MITIGATION: blacklist the dccp ipv[46] autoloading aliases by
adding the following lines to /etc/modprobe.d/blacklist-dccp.conf:
alias net-pf-2-proto-0-type-6 off
alias net-pf-2-proto-33-type-6 off
alias net-pf-10-proto-0-type-6 off
alias net-pf-10-proto-33-type-6 off
Package
| Upstream: | released
(4.10)
|
| Ubuntu 12.04 ESM (Precise Pangolin): | released
(3.13.0-110.157~precise1)
|
| Ubuntu 14.04 LTS (Trusty Tahr): | DNE
|
| Ubuntu 16.04 LTS (Xenial Xerus): | DNE
|
| Ubuntu 17.04 (Zesty Zapus): | DNE
|
| Ubuntu 17.10 (Artful Aardvark): | DNE
|
Package
| Upstream: | released
(4.10)
|
| Ubuntu 12.04 ESM (Precise Pangolin): | DNE
|
| Ubuntu 14.04 LTS (Trusty Tahr): | ignored
(end-of-life)
|
| Ubuntu 16.04 LTS (Xenial Xerus): | DNE
|
| Ubuntu 17.04 (Zesty Zapus): | DNE
|
| Ubuntu 17.10 (Artful Aardvark): | DNE
|
Package
| Upstream: | released
(4.10)
|
| Ubuntu 12.04 ESM (Precise Pangolin): | DNE
(precise was ignored [end-of-life])
|
| Ubuntu 14.04 LTS (Trusty Tahr): | DNE
|
| Ubuntu 16.04 LTS (Xenial Xerus): | DNE
|
| Ubuntu 17.04 (Zesty Zapus): | DNE
|
| Ubuntu 17.10 (Artful Aardvark): | DNE
|
Patches:
Package
| Upstream: | released
(4.10)
|
| Ubuntu 12.04 ESM (Precise Pangolin): | DNE
|
| Ubuntu 14.04 LTS (Trusty Tahr): | DNE
|
| Ubuntu 16.04 LTS (Xenial Xerus): | not-affected
(4.4.0-1003.3)
|
| Ubuntu 17.04 (Zesty Zapus): | DNE
|
| Ubuntu 17.10 (Artful Aardvark): | DNE
|
Package
| Upstream: | released
(4.10)
|
| Ubuntu 12.04 ESM (Precise Pangolin): | DNE
(precise was released [3.2.0-1501.128])
|
| Ubuntu 14.04 LTS (Trusty Tahr): | DNE
|
| Ubuntu 16.04 LTS (Xenial Xerus): | DNE
|
| Ubuntu 17.04 (Zesty Zapus): | DNE
|
| Ubuntu 17.10 (Artful Aardvark): | DNE
|
Package
| Upstream: | released
(4.10)
|
| Ubuntu 12.04 ESM (Precise Pangolin): | DNE
(precise was ignored [end-of-life])
|
| Ubuntu 14.04 LTS (Trusty Tahr): | DNE
|
| Ubuntu 16.04 LTS (Xenial Xerus): | DNE
|
| Ubuntu 17.04 (Zesty Zapus): | DNE
|
| Ubuntu 17.10 (Artful Aardvark): | DNE
|
Package
| Upstream: | released
(4.10)
|
| Ubuntu 12.04 ESM (Precise Pangolin): | DNE
(precise was released [3.2.0-1684.111])
|
| Ubuntu 14.04 LTS (Trusty Tahr): | DNE
|
| Ubuntu 16.04 LTS (Xenial Xerus): | DNE
|
| Ubuntu 17.04 (Zesty Zapus): | DNE
|
| Ubuntu 17.10 (Artful Aardvark): | DNE
|
Package
| Upstream: | released
(4.10)
|
| Ubuntu 12.04 ESM (Precise Pangolin): | DNE
(precise was ignored [abandoned])
|
| Ubuntu 14.04 LTS (Trusty Tahr): | DNE
|
| Ubuntu 16.04 LTS (Xenial Xerus): | DNE
|
| Ubuntu 17.04 (Zesty Zapus): | DNE
|
| Ubuntu 17.10 (Artful Aardvark): | DNE
|
Package
| Upstream: | released
(4.10)
|
| Ubuntu 12.04 ESM (Precise Pangolin): | DNE
|
| Ubuntu 14.04 LTS (Trusty Tahr): | ignored
|
| Ubuntu 16.04 LTS (Xenial Xerus): | DNE
|
| Ubuntu 17.04 (Zesty Zapus): | DNE
|
| Ubuntu 17.10 (Artful Aardvark): | DNE
|
Package
| Upstream: | released
(4.10)
|
| Ubuntu 12.04 ESM (Precise Pangolin): | DNE
|
| Ubuntu 14.04 LTS (Trusty Tahr): | released
(4.4.0-64.85~14.04.1)
|
| Ubuntu 16.04 LTS (Xenial Xerus): | DNE
|
| Ubuntu 17.04 (Zesty Zapus): | DNE
|
| Ubuntu 17.10 (Artful Aardvark): | DNE
|
Package
| Upstream: | released
(4.10)
|
| Ubuntu 12.04 ESM (Precise Pangolin): | DNE
(precise was ignored [end-of-life])
|
| Ubuntu 14.04 LTS (Trusty Tahr): | DNE
|
| Ubuntu 16.04 LTS (Xenial Xerus): | DNE
|
| Ubuntu 17.04 (Zesty Zapus): | DNE
|
| Ubuntu 17.10 (Artful Aardvark): | DNE
|
Package
| Upstream: | released
(4.10)
|
| Ubuntu 12.04 ESM (Precise Pangolin): | DNE
|
| Ubuntu 14.04 LTS (Trusty Tahr): | DNE
|
| Ubuntu 16.04 LTS (Xenial Xerus): | released
(4.10.0-14.16~16.04.1)
|
| Ubuntu 17.04 (Zesty Zapus): | DNE
|
| Ubuntu 17.10 (Artful Aardvark): | DNE
|
Package
| Upstream: | released
(4.10)
|
| Ubuntu 12.04 ESM (Precise Pangolin): | DNE
|
| Ubuntu 14.04 LTS (Trusty Tahr): | ignored
|
| Ubuntu 16.04 LTS (Xenial Xerus): | DNE
|
| Ubuntu 17.04 (Zesty Zapus): | DNE
|
| Ubuntu 17.10 (Artful Aardvark): | DNE
|
Package
| Upstream: | released
(4.10)
|
| Ubuntu 12.04 ESM (Precise Pangolin): | DNE
|
| Ubuntu 14.04 LTS (Trusty Tahr): | ignored
|
| Ubuntu 16.04 LTS (Xenial Xerus): | DNE
|
| Ubuntu 17.04 (Zesty Zapus): | DNE
|
| Ubuntu 17.10 (Artful Aardvark): | DNE
|
Package
| Upstream: | released
(4.10)
|
| Ubuntu 12.04 ESM (Precise Pangolin): | DNE
(precise was ignored [abandoned])
|
| Ubuntu 14.04 LTS (Trusty Tahr): | DNE
|
| Ubuntu 16.04 LTS (Xenial Xerus): | DNE
|
| Ubuntu 17.04 (Zesty Zapus): | DNE
|
| Ubuntu 17.10 (Artful Aardvark): | DNE
|
Package
| Upstream: | released
(4.10)
|
| Ubuntu 12.04 ESM (Precise Pangolin): | DNE
(precise was ignored [abandoned])
|
| Ubuntu 14.04 LTS (Trusty Tahr): | DNE
|
| Ubuntu 16.04 LTS (Xenial Xerus): | DNE
|
| Ubuntu 17.04 (Zesty Zapus): | DNE
|
| Ubuntu 17.10 (Artful Aardvark): | DNE
|
Package
| Upstream: | released
(4.10)
|
| Ubuntu 12.04 ESM (Precise Pangolin): | DNE
|
| Ubuntu 14.04 LTS (Trusty Tahr): | ignored
|
| Ubuntu 16.04 LTS (Xenial Xerus): | DNE
|
| Ubuntu 17.04 (Zesty Zapus): | DNE
|
| Ubuntu 17.10 (Artful Aardvark): | DNE
|
Package
| Upstream: | released
(4.10)
|
| Ubuntu 12.04 ESM (Precise Pangolin): | DNE
(precise was ignored [abandoned])
|
| Ubuntu 14.04 LTS (Trusty Tahr): | DNE
|
| Ubuntu 16.04 LTS (Xenial Xerus): | DNE
|
| Ubuntu 17.04 (Zesty Zapus): | DNE
|
| Ubuntu 17.10 (Artful Aardvark): | DNE
|
Package
| Upstream: | released
(4.10)
|
| Ubuntu 12.04 ESM (Precise Pangolin): | DNE
|
| Ubuntu 14.04 LTS (Trusty Tahr): | ignored
(end-of-life)
|
| Ubuntu 16.04 LTS (Xenial Xerus): | DNE
|
| Ubuntu 17.04 (Zesty Zapus): | DNE
|
| Ubuntu 17.10 (Artful Aardvark): | DNE
|
Package
| Upstream: | released
(4.10)
|
| Ubuntu 12.04 ESM (Precise Pangolin): | DNE
|
| Ubuntu 14.04 LTS (Trusty Tahr): | DNE
|
| Ubuntu 16.04 LTS (Xenial Xerus): | released
(4.8.0-39.42~16.04.1)
|
| Ubuntu 17.04 (Zesty Zapus): | DNE
|
| Ubuntu 17.10 (Artful Aardvark): | DNE
|
Updated: 2017-12-15 20:35:53 UTC (commit 13913)