CVE-2017-2671

MEDIUM

Linux Kernel < 4.10.8 - Denial of Service

Title source: rule

Description

The ping_unhash function in net/ipv4/ping.c in the Linux kernel through 4.10.8 is too late in obtaining a certain lock and consequently cannot ensure that disconnect function calls are safe, which allows local users to cause a denial of service (panic) by leveraging access to the protocol value of IPPROTO_ICMP in a socket system call.

Exploits (2)

nomisec WORKING POC
by homjxi0e · poc
https://github.com/homjxi0e/CVE-2017-2671
exploitdb WORKING POC VERIFIED
by Daniel Jiang · cdosandroid
https://www.exploit-db.com/exploits/42135

Scores

CVSS v3 5.5
EPSS 0.0027
EPSS Percentile 49.7%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Classification

Status published

Affected Products (2)

linux/linux_kernel < 4.10.8
n/a/n/a

Timeline

Published Apr 05, 2017
Tracked Since Feb 18, 2026