CVE-2017-2671
MEDIUMLinux Kernel < 4.10.8 - Denial of Service via ICMP Socket Protocol Value
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2017-2671. PoCs published by Daniel Jiang, homjxi0e.
AI-analyzed exploit summary This exploit triggers a kernel panic in the Linux kernel by fuzzing the `sin_family` field in a socket connection, leading to a denial-of-service (DoS) condition. It uses multithreading to repeatedly send malformed socket data to exploit CVE-2017-2671.
Description
The ping_unhash function in net/ipv4/ping.c in the Linux kernel through 4.10.8 is too late in obtaining a certain lock and consequently cannot ensure that disconnect function calls are safe, which allows local users to cause a denial of service (panic) by leveraging access to the protocol value of IPPROTO_ICMP in a socket system call.
Exploits (2)
This exploit triggers a kernel panic in the Linux kernel by fuzzing the `sin_family` field in a socket connection, leading to a denial-of-service (DoS) condition. It uses multithreading to repeatedly send malformed socket data to exploit CVE-2017-2671.
This PoC exploits CVE-2017-2671, a Linux kernel vulnerability that allows local users to cause a denial of service (panic) by manipulating the protocol value of IPPROTO_ICMP in a socket system call. The code creates a socket and repeatedly connects with manipulated sin_family values to trigger the vulnerability.
References (12)
Scores
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H