CVE-2017-5986

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Race condition in the sctp_wait_for_sndbuf function in net/sctp/socket.c in the Linux kernel before 4.9.11 allows local users to cause a denial of service (assertion failure and panic) via a multithreaded application that peels off an association in a certain buffer-full state.

Metrics

CVSS 3.0 5.5/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-362 CWE-617

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2dcab598484185dea7ec22219c76dcdd59e3cb90Issue Tracking, Patch, Third Party Advisory
http://www.debian.org/security/2017/dsa-3804
http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.11Release Notes, Vendor Advisory
http://www.openwall.com/lists/oss-security/2017/02/14/6Mailing List, Patch, Third Party Advisory
http://www.securityfocus.com/bid/96222
https://access.redhat.com/errata/RHSA-2017:1308
https://bugzilla.redhat.com/show_bug.cgi?id=1420276Issue Tracking, Patch
https://github.com/torvalds/linux/commit/2dcab598484185dea7ec22219c76dcdd59e3cb90Issue Tracking, Patch, Third Party Advisory
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2dcab598484185dea7ec22219c76dcdd59e3cb90Issue Tracking, Patch, Third Party Advisory
http://www.debian.org/security/2017/dsa-3804
http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.11Release Notes, Vendor Advisory
http://www.openwall.com/lists/oss-security/2017/02/14/6Mailing List, Patch, Third Party Advisory
http://www.securityfocus.com/bid/96222
https://access.redhat.com/errata/RHSA-2017:1308
https://bugzilla.redhat.com/show_bug.cgi?id=1420276Issue Tracking, Patch
https://github.com/torvalds/linux/commit/2dcab598484185dea7ec22219c76dcdd59e3cb90Issue Tracking, Patch, Third Party Advisory

Timeline

Published: Feb 18, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-59875.5The sdhci_sdma_transfer_multi_blocks function in hw/sd/sdhci.c in QEMU (aka Quick Emulator) allows local OS guest privileged users to cause CVE-2017-59887.5NetApp Clustered Data ONTAP 8.1 through 9.1P1, when NFS or SMB is enabled, allows remote attackers to cause a denial of service via unspecif CVE-2017-59906.1An issue was discovered in PhreeBooksERP before 2017-02-13. The vulnerability exists due to insufficient filtration of user-supplied data in CVE-2017-59917.5An issue was discovered in Artifex MuPDF before 1912de5f08e90af1d9d0a9791f58ba3afdb9d465. The pdf_run_xobject function in pdf-op-run.c encou CVE-2017-59928.2Openpyxl 2.4.1 resolves external entities by default, which allows remote attackers to conduct XXE attacks via a crafted .xlsx document.CVE-2017-59936.5Memory leak in the vrend_renderer_init_blit_ctx function in vrend_blitter.c in virglrenderer before 0.6.0 allows local guest OS users to cau CVE-2017-59945.5Heap-based buffer overflow in the vrend_create_vertex_elements_state function in vrend_renderer.c in virglrenderer before 0.6.0 allows local CVE-2017-59957.5The NetApp ONTAP Select Deploy administration utility 2.0 through 2.2.1 might allow remote attackers to obtain sensitive information via uns CVE-2017-59967.8The agent in Bomgar Remote Support 15.2.x before 15.2.3, 16.1.x before 16.1.5, and 16.2.x before 16.2.4 allows DLL hijacking because of weak CVE-2017-59977.5The SAP Message Server HTTP daemon in SAP KERNEL 7.21-7.49 allows remote attackers to cause a denial of service (memory consumption and proc CVE-2017-59985.4Cross-site scripting (XSS) vulnerability in InterSect Alliance SNARE Epilog for UNIX version 1.5 allows remote authenticated users to inject CVE-2017-59997.5An issue was discovered in sysPass 2.x before 2.1, in which an algorithm was never sufficiently reviewed by cryptographers. The fact that in