CVE-2017-17712

HighCVSS 7.0/10Last modified Jun 17, 2026

Description

The raw_sendmsg() function in net/ipv4/raw.c in the Linux kernel through 4.14.6 has a race condition in inet->hdrincl that leads to uninitialized stack pointer usage; this allows a local user to execute code and gain privileges.

Metrics

CVSS 3.1 7.0/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-362

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8f659a03a0ba9289b9aeb9b4470e6fb263d6f483Patch, Vendor Advisory
https://access.redhat.com/errata/RHSA-2018:0502Third Party Advisory
https://github.com/torvalds/linux/commit/8f659a03a0ba9289b9aeb9b4470e6fb263d6f483Patch, Third Party Advisory
https://source.android.com/security/bulletin/pixel/2018-04-01Third Party Advisory
https://usn.ubuntu.com/3581-1/Third Party Advisory
https://usn.ubuntu.com/3581-2/Third Party Advisory
https://usn.ubuntu.com/3581-3/Third Party Advisory
https://usn.ubuntu.com/3582-1/Third Party Advisory
https://usn.ubuntu.com/3582-2/Third Party Advisory
https://www.debian.org/security/2017/dsa-4073Third Party Advisory
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8f659a03a0ba9289b9aeb9b4470e6fb263d6f483Patch, Vendor Advisory
https://access.redhat.com/errata/RHSA-2018:0502Third Party Advisory
https://github.com/torvalds/linux/commit/8f659a03a0ba9289b9aeb9b4470e6fb263d6f483Patch, Third Party Advisory
https://source.android.com/security/bulletin/pixel/2018-04-01Third Party Advisory
https://usn.ubuntu.com/3581-1/Third Party Advisory
https://usn.ubuntu.com/3581-2/Third Party Advisory
https://usn.ubuntu.com/3581-3/Third Party Advisory
https://usn.ubuntu.com/3582-1/Third Party Advisory
https://usn.ubuntu.com/3582-2/Third Party Advisory
https://www.debian.org/security/2017/dsa-4073Third Party Advisory

Timeline

Published: Dec 16, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-177139.8Trape before 2017-11-05 has SQL injection via the /nr red parameter, the /nr vId parameter, the /register User-Agent HTTP header, the /regis CVE-2017-177146.1Trape before 2017-11-05 has XSS via the /nr red parameter, the /nr vId parameter, the /register User-Agent HTTP header, the /register countr CVE-2017-177158.8The saveFile method in MediaController.java in the Telegram Messenger application before 2017-12-08 for Android allows directory traversal v CVE-2017-177165.9GitLab 9.4.x before 9.4.2 does not support LDAP SSL certificate verification, but a verify_certificates LDAP option was mentioned in the 9.4 CVE-2017-177179.8Sonatype Nexus Repository Manager through 2.14.5 has weak password encryption with a hardcoded CMMDwoV value in the LDAP integration feature CVE-2017-177185.9The Net::LDAP (aka net-ldap) gem before 0.16.0 for Ruby has Missing SSL Certificate Validation.CVE-2017-177196.1A cross-site scripting (XSS) vulnerability in the wp-concours plugin through 1.1 for WordPress allows remote attackers to inject arbitrary w CVE-2017-17726.1IBM Worklight (IBM MobileFirst Platform Foundation 6.3, 7.0, 7.1, and 8.0) is vulnerable to cross-site scripting. This vulnerability allows CVE-2017-177219.8CWEBNET/WOSummary/List in ZUUSE BEIMS ContractorWeb .NET 5.18.0.0 allows SQL injection via the tradestatus, assetno, assignto, building, dom CVE-2017-177226.5In Exiv2 0.26, there is a reachable assertion in the readHeader function in bigtiffimage.cpp, which will lead to a remote denial of service CVE-2017-177238.1In Exiv2 0.26, there is a heap-based buffer over-read in the Exiv2::Image::byteSwap4 function in image.cpp. Remote attackers can exploit thi CVE-2017-177246.5In Exiv2 0.26, there is a heap-based buffer over-read in the Exiv2::IptcData::printStructure function in iptc.cpp, related to the "!= 0x1c"