CVE-2017-17877

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

An issue was discovered in Valve Steam Link build 643. When the SSH daemon is enabled for local development, the device is publicly available via IPv6 TCP port 22 over the internet (with stateless address autoconfiguration) by default, which makes it easier for remote attackers to obtain access by guessing 24 bits of the MAC address and attempting a root login. This can be exploited in conjunction with CVE-2017-17878.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://blogger.davidmanouchehri.com/2017/12/steam-link-security-remotely-insecure.htmlIssue Tracking, Third Party Advisory
https://github.com/ValveSoftware/steamlink-sdk#ssh-accessIssue Tracking, Third Party Advisory
https://github.com/ValveSoftware/steamlink-sdk/issues/119Issue Tracking, Third Party Advisory
https://blogger.davidmanouchehri.com/2017/12/steam-link-security-remotely-insecure.htmlIssue Tracking, Third Party Advisory
https://github.com/ValveSoftware/steamlink-sdk#ssh-accessIssue Tracking, Third Party Advisory
https://github.com/ValveSoftware/steamlink-sdk/issues/119Issue Tracking, Third Party Advisory

Timeline

Published: Dec 27, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-178789.8An issue was discovered in Valve Steam Link build 643. Root passwords longer than 8 characters are truncated because of the default use of D CVE-2017-178798.8In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-21, there is a heap-based buffer over-read in ReadOneMNGImage in coders/png.c, related to length CVE-2017-17885.3IBM WebSphere Application Server 9 installations using Form Login could allow a remote attacker to conduct spoofing attacks. IBM X-Force ID:CVE-2017-178808.8In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-21, there is a stack-based buffer over-read in WriteWEBPImage in coders/webp.c, related to a WEBP CVE-2017-178816.5In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to c CVE-2017-178826.5In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadXPMImage in coders/xpm.c, which allows attackers to c CVE-2017-178836.5In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadPGXImage in coders/pgx.c, which allows attackers to c CVE-2017-178846.5In ImageMagick 7.0.7-16 Q16, a memory leak vulnerability was found in the function WriteOnePNGImage in coders/png.c, which allows attackers CVE-2017-178856.5In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadPICTImage in coders/pict.c, which allows attackers to CVE-2017-178866.5In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadPSDChannelZip in coders/psd.c, which allows attackers CVE-2017-178876.5In ImageMagick 7.0.7-16 Q16, a memory leak vulnerability was found in the function GetImagePixelCache in magick/cache.c, which allows attack CVE-2017-178888.8cgi-bin/write.cgi in Anti-Web through 3.8.7, as used on NetBiter / HMS, Ouman EH-net, Alliance System WS100 --> AWU 500, Sauter ERW100F001,