Security Advisory

CVE-2017-9242

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-05-27 00:00:00
Last updated 2024-08-05 17:02:43
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

The __ip6_append_data function in net/ipv6/ip6_output.c in the Linux kernel through 4.11.3 is too late in checking whether an overwrite of an skb data structure may occur, which allows local users to cause a denial of service (system crash) via crafted system calls.