Description
The ip6gre_err function in net/ipv6/ip6_gre.c in the Linux kernel allows remote attackers to have unspecified impact via vectors involving GRE flags in an IPv6 packet, which trigger an out-of-bounds access.
References (7)
Core 7
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1037794
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/96037
Third Party Advisory x_refsource_confirm
https://source.android.com/security/bulletin/2017-09-01
Patch, Third Party Advisory x_refsource_confirm
https://git.kernel.org/pub/scm/linux/kernel/git/davem/net.git/commit/?id=7892032cfe67f4bde6fc2ee967e45a8fbaf33756
Third Party Advisory vendor-advisory
x_refsource_ubuntu
https://usn.ubuntu.com/3754-1/
Mailing List, Third Party Advisory mailing-list
x_refsource_mlist
http://www.openwall.com/lists/oss-security/2017/02/07/2
Third Party Advisory vendor-advisory
x_refsource_debian
http://www.debian.org/security/2017/dsa-3791
Scores
CVSS v3
9.8
EPSS
0.0199
EPSS Percentile
83.8%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-125
Status
published
Products (3)
canonical/ubuntu_linux
14.04
debian/debian_linux
8.0
linux/linux_kernel
3.7 - 3.10.106
Published
Mar 23, 2017
Tracked Since
Feb 18, 2026