CVE-2017-16939
HIGHLinux kernel <4.13.11 - Privilege Escalation/DoS
Title source: llmDescription
The XFRM dump policy implementation in net/xfrm/xfrm_user.c in the Linux kernel before 4.13.11 allows local users to gain privileges or cause a denial of service (use-after-free) via a crafted SO_RCVBUF setsockopt system call in conjunction with XFRM_MSG_GETPOLICY Netlink messages.
Exploits (2)
github
WORKING POC
3 stars
by TamiiLambrado · cpoc
https://github.com/TamiiLambrado/CVE-pocs/tree/master/CVE-2017-16939-ipsec-xfrm.c
References (14)
Scores
CVSS v3
7.8
EPSS
0.1016
EPSS Percentile
93.1%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-416
Status
published
Products (2)
debian/debian_linux
8.0
linux/linux_kernel
2.6.28 - 3.2.97
Published
Nov 24, 2017
Tracked Since
Feb 18, 2026