CVE-2017-8797

Upstream information

CVE-2017-8797 at MITRE

Description

The NFSv4 server in the Linux kernel before 4.11.3 does not properly validate the layout type when processing the NFSv4 pNFS GETDEVICEINFO or LAYOUTGET operand in a UDP packet from a remote attacker. This type value is uninitialized upon encountering certain error conditions. This value is used as an array index for dereferencing, which leads to an OOPS and eventually a DoS of knfsd and a soft-lockup of the whole system.

---

SUSE information

Overall state of this security issue: Does not affect SUSE products

This issue is currently rated as having important severity.

CVSS v2 Scores

	National Vulnerability Database	SUSE
Base Score	7.8	7.1
Vector	AV:N/AC:L/Au:N/C:N/I:N/A:C	AV:N/AC:M/Au:N/C:N/I:N/A:C
Access Vector	Network	Network
Access Complexity	Low	Medium
Authentication	None	None
Confidentiality Impact	None	None
Integrity Impact	None	None
Availability Impact	Complete	Complete

CVSS v3 Scores

	National Vulnerability Database	SUSE
Base Score	7.5	7.5
Vector	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Access Vector	Network	Network
Access Complexity	Low	Low
Privileges Required	None	None
User Interaction	None	None
Scope	Unchanged	Unchanged
Confidentiality Impact	None	None
Integrity Impact	None	None
Availability Impact	High	High
CVSSv3 Version	3	3

SUSE Bugzilla entries: 1046202 [RESOLVED / INVALID], 1046206 [RESOLVED / FIXED]

SUSE Security Advisories:

• SUSE-SU-2017:2043-1, published Fri, 4 Aug 2017 21:06:55 +0200 (CEST)
• SUSE-SU-2017:2046-1, published Fri, 4 Aug 2017 21:09:28 +0200 (CEST)
• SUSE-SU-2017:2062-1, published Mon, 7 Aug 2017 15:11:15 +0200 (CEST)
• SUSE-SU-2017:2063-1, published Mon Aug 7 07:12:26 MDT 2017
• SUSE-SU-2017:2064-1, published Mon, 7 Aug 2017 15:13:41 +0200 (CEST)
• SUSE-SU-2017:2065-1, published Mon, 7 Aug 2017 15:15:00 +0200 (CEST)
• SUSE-SU-2017:2066-1, published Mon, 7 Aug 2017 15:16:21 +0200 (CEST)
• SUSE-SU-2017:2067-1, published Mon, 7 Aug 2017 15:17:40 +0200 (CEST)
• SUSE-SU-2017:2068-1, published Mon Aug 7 07:18:56 MDT 2017
• SUSE-SU-2017:2070-1, published Mon, 7 Aug 2017 15:20:40 +0200 (CEST)

List of released packages

Product(s)	Fixed package version(s)	References
SUSE Linux Enterprise Live Patching 12	kgraft-patch-4_4_21-69-default >= 8-18.7.1 kgraft-patch-4_4_21-81-default >= 8-2.1 kgraft-patch-4_4_21-84-default >= 7-2.1 kgraft-patch-4_4_21-90-default >= 7-2.1 kgraft-patch-4_4_38-93-default >= 7-2.1 kgraft-patch-4_4_49-92_11-default >= 5-2.1 kgraft-patch-4_4_49-92_14-default >= 4-2.1 kgraft-patch-4_4_59-92_17-default >= 3-2.1 kgraft-patch-4_4_59-92_20-default >= 3-2.1 kgraft-patch-4_4_59-92_24-default >= 2-2.1	Patchnames: SUSE-SLE-Live-Patching-12-2017-1257 SUSE-SLE-Live-Patching-12-2017-1258 SUSE-SLE-Live-Patching-12-2017-1263 SUSE-SLE-Live-Patching-12-2017-1264 SUSE-SLE-Live-Patching-12-2017-1265 SUSE-SLE-Live-Patching-12-2017-1266 SUSE-SLE-Live-Patching-12-2017-1267 SUSE-SLE-Live-Patching-12-2017-1269 SUSE-SLE-Live-Patching-12-2017-1270 SUSE-SLE-Live-Patching-12-2017-1271

---

Status of this issue by product and package

Please note that this evaluation state might be work in progress, incomplete or outdated. Also information for service packs in the LTSS phase is only included for issues meeting the LTSS criteria. If in doubt, feel free to contact us for clarification.

Product(s)	Source package	State
HPE Helion OpenStack 8	kernel-default	Analysis
HPE Helion OpenStack 8	kernel-source	Analysis
SLES for SAP Applications	kernel-default	Unsupported
SLES for SAP Applications	kernel-source	Unsupported
SUSE Enterprise Storage 5	kernel-default	Analysis
SUSE Enterprise Storage 5	kernel-source	Analysis
SUSE Linux Enterprise Desktop 12 SP2	kernel-default	Affected
SUSE Linux Enterprise Desktop 12 SP2	kernel-source	Affected
SUSE Linux Enterprise Desktop 12 SP3	kernel-default	Analysis
SUSE Linux Enterprise Desktop 12 SP3	kernel-source	Analysis
SUSE Linux Enterprise Desktop 12 SP4	kernel-default	Analysis
SUSE Linux Enterprise Desktop 12 SP4	kernel-source	Analysis
SUSE Linux Enterprise High Performance Computing 12 SP4	kernel-default	Analysis
SUSE Linux Enterprise High Performance Computing 12 SP4	kernel-source	Analysis
SUSE Linux Enterprise High Performance Computing 12 SP5	kernel-default	Analysis
SUSE Linux Enterprise High Performance Computing 12 SP5	kernel-source	Analysis
SUSE Linux Enterprise High Performance Computing 15 LTSS	kernel-default	Analysis
SUSE Linux Enterprise High Performance Computing 15 LTSS	kernel-source	Analysis
SUSE Linux Enterprise Live Patching	kgraft-patch-SLE12-SP2_Update_0	Released
SUSE Linux Enterprise Live Patching	kgraft-patch-SLE12-SP2_Update_1	In progress
SUSE Linux Enterprise Live Patching	kgraft-patch-SLE12-SP2_Update_2	In progress
SUSE Linux Enterprise Live Patching	kgraft-patch-SLE12-SP2_Update_3	In progress
SUSE Linux Enterprise Live Patching	kgraft-patch-SLE12-SP2_Update_4	In progress
SUSE Linux Enterprise Live Patching	kgraft-patch-SLE12-SP2_Update_5	In progress
SUSE Linux Enterprise Live Patching	kgraft-patch-SLE12-SP2_Update_6	In progress
SUSE Linux Enterprise Live Patching	kgraft-patch-SLE12-SP2_Update_7	In progress
SUSE Linux Enterprise Live Patching	kgraft-patch-SLE12-SP2_Update_8	In progress
SUSE Linux Enterprise Live Patching	kgraft-patch-SLE12-SP2_Update_9	In progress
SUSE Linux Enterprise Module for Basesystem 15	kernel-default	Analysis
SUSE Linux Enterprise Module for Basesystem 15	kernel-source	Analysis
SUSE Linux Enterprise Module for Basesystem 15 SP1	kernel-default	Analysis
SUSE Linux Enterprise Module for Basesystem 15 SP1	kernel-source	Analysis
SUSE Linux Enterprise Module for Basesystem 15 SP2	kernel-default	Analysis
SUSE Linux Enterprise Module for Basesystem 15 SP2	kernel-source	Analysis
SUSE Linux Enterprise Module for Development Tools 15	kernel-default	Analysis
SUSE Linux Enterprise Module for Development Tools 15	kernel-source	Analysis
SUSE Linux Enterprise Module for Development Tools 15 SP1	kernel-default	Analysis
SUSE Linux Enterprise Module for Development Tools 15 SP1	kernel-source	Analysis
SUSE Linux Enterprise Module for Development Tools 15 SP2	kernel-default	Analysis
SUSE Linux Enterprise Module for Development Tools 15 SP2	kernel-source	Analysis
SUSE Linux Enterprise Point of Service 11 SP3	kernel-default	Analysis
SUSE Linux Enterprise Point of Service 11 SP3	kernel-source	Analysis
SUSE Linux Enterprise Point of Service Image Server 12	kernel-default	Analysis
SUSE Linux Enterprise Point of Service Image Server 12	kernel-source	Analysis
SUSE Linux Enterprise Point of Service Image Server 12	kgraft-patch-SLE12-SP2_Update_0	Released
SUSE Linux Enterprise Server 11 SP3 LTSS	kernel-default	Analysis
SUSE Linux Enterprise Server 11 SP3 LTSS	kernel-source	Analysis
SUSE Linux Enterprise Server 11 SP4	kernel-default	Analysis
SUSE Linux Enterprise Server 11 SP4	kernel-source	Analysis
SUSE Linux Enterprise Server 11 SP4 LTSS	kernel-default	Analysis
SUSE Linux Enterprise Server 11 SP4 LTSS	kernel-source	Analysis
SUSE Linux Enterprise Server 12 LTSS	kernel-default	Analysis
SUSE Linux Enterprise Server 12 LTSS	kernel-source	Analysis
SUSE Linux Enterprise Server 12 SP1 LTSS	kernel-default	Not affected
SUSE Linux Enterprise Server 12 SP1 LTSS	kernel-source	Not affected
SUSE Linux Enterprise Server 12 SP2	kernel-default	Not affected
SUSE Linux Enterprise Server 12 SP2	kernel-source	Not affected
SUSE Linux Enterprise Server 12 SP2 BCL	kernel-default	Analysis
SUSE Linux Enterprise Server 12 SP2 BCL	kernel-source	Analysis
SUSE Linux Enterprise Server 12 SP2 BCL	kgraft-patch-SLE12-SP2_Update_0	Released
SUSE Linux Enterprise Server 12 SP2 BCL	kgraft-patch-SLE12-SP2_Update_1	In progress
SUSE Linux Enterprise Server 12 SP2 BCL	kgraft-patch-SLE12-SP2_Update_2	In progress
SUSE Linux Enterprise Server 12 SP2 BCL	kgraft-patch-SLE12-SP2_Update_3	In progress
SUSE Linux Enterprise Server 12 SP2 BCL	kgraft-patch-SLE12-SP2_Update_4	In progress
SUSE Linux Enterprise Server 12 SP2 BCL	kgraft-patch-SLE12-SP2_Update_5	In progress
SUSE Linux Enterprise Server 12 SP2 BCL	kgraft-patch-SLE12-SP2_Update_6	In progress
SUSE Linux Enterprise Server 12 SP2 BCL	kgraft-patch-SLE12-SP2_Update_7	In progress
SUSE Linux Enterprise Server 12 SP2 BCL	kgraft-patch-SLE12-SP2_Update_8	In progress
SUSE Linux Enterprise Server 12 SP2 BCL	kgraft-patch-SLE12-SP2_Update_9	In progress
SUSE Linux Enterprise Server 12 SP2 ESPOS	kernel-default	Analysis
SUSE Linux Enterprise Server 12 SP2 ESPOS	kernel-source	Analysis
SUSE Linux Enterprise Server 12 SP2 ESPOS	kgraft-patch-SLE12-SP2_Update_0	Released
SUSE Linux Enterprise Server 12 SP2 LTSS	kernel-default	Analysis
SUSE Linux Enterprise Server 12 SP2 LTSS	kernel-source	Analysis
SUSE Linux Enterprise Server 12 SP2 LTSS	kgraft-patch-SLE12-SP2_Update_0	Released
SUSE Linux Enterprise Server 12 SP2 LTSS ERICSSON	kgraft-patch-SLE12-SP2_Update_0	Released
SUSE Linux Enterprise Server 12 SP2 LTSS ERICSSON	kgraft-patch-SLE12-SP2_Update_1	In progress
SUSE Linux Enterprise Server 12 SP2 LTSS ERICSSON	kgraft-patch-SLE12-SP2_Update_2	In progress
SUSE Linux Enterprise Server 12 SP2 LTSS ERICSSON	kgraft-patch-SLE12-SP2_Update_3	In progress
SUSE Linux Enterprise Server 12 SP2 LTSS ERICSSON	kgraft-patch-SLE12-SP2_Update_4	In progress
SUSE Linux Enterprise Server 12 SP2 LTSS ERICSSON	kgraft-patch-SLE12-SP2_Update_5	In progress
SUSE Linux Enterprise Server 12 SP2 LTSS ERICSSON	kgraft-patch-SLE12-SP2_Update_6	In progress
SUSE Linux Enterprise Server 12 SP2 LTSS ERICSSON	kgraft-patch-SLE12-SP2_Update_7	In progress
SUSE Linux Enterprise Server 12 SP2 LTSS ERICSSON	kgraft-patch-SLE12-SP2_Update_8	In progress
SUSE Linux Enterprise Server 12 SP2 LTSS ERICSSON	kgraft-patch-SLE12-SP2_Update_9	In progress
SUSE Linux Enterprise Server 12 SP2 LTSS SAP	kgraft-patch-SLE12-SP2_Update_0	Released
SUSE Linux Enterprise Server 12 SP2 LTSS SAP	kgraft-patch-SLE12-SP2_Update_1	In progress
SUSE Linux Enterprise Server 12 SP2 LTSS SAP	kgraft-patch-SLE12-SP2_Update_2	In progress
SUSE Linux Enterprise Server 12 SP2 LTSS SAP	kgraft-patch-SLE12-SP2_Update_3	In progress
SUSE Linux Enterprise Server 12 SP2 LTSS SAP	kgraft-patch-SLE12-SP2_Update_4	In progress
SUSE Linux Enterprise Server 12 SP2 LTSS SAP	kgraft-patch-SLE12-SP2_Update_5	In progress
SUSE Linux Enterprise Server 12 SP2 LTSS SAP	kgraft-patch-SLE12-SP2_Update_6	In progress
SUSE Linux Enterprise Server 12 SP2 LTSS SAP	kgraft-patch-SLE12-SP2_Update_7	In progress
SUSE Linux Enterprise Server 12 SP2 LTSS SAP	kgraft-patch-SLE12-SP2_Update_8	In progress
SUSE Linux Enterprise Server 12 SP2 LTSS SAP	kgraft-patch-SLE12-SP2_Update_9	In progress
SUSE Linux Enterprise Server 12 SP3	kernel-default	Analysis
SUSE Linux Enterprise Server 12 SP3	kernel-source	Analysis
SUSE Linux Enterprise Server 12 SP3 BCL	kernel-default	Analysis
SUSE Linux Enterprise Server 12 SP3 BCL	kernel-source	Analysis
SUSE Linux Enterprise Server 12 SP3 ESPOS	kernel-default	Analysis
SUSE Linux Enterprise Server 12 SP3 ESPOS	kernel-source	Analysis
SUSE Linux Enterprise Server 12 SP3 LTSS	kernel-default	Analysis
SUSE Linux Enterprise Server 12 SP3 LTSS	kernel-source	Analysis
SUSE Linux Enterprise Server 12 SP4	kernel-default	Analysis
SUSE Linux Enterprise Server 12 SP4	kernel-source	Analysis
SUSE Linux Enterprise Server 12 SP4 ESPOS	kernel-default	Analysis
SUSE Linux Enterprise Server 12 SP4 ESPOS	kernel-source	Analysis
SUSE Linux Enterprise Server 12 SP4 LTSS	kernel-default	Analysis
SUSE Linux Enterprise Server 12 SP4 LTSS	kernel-source	Analysis
SUSE Linux Enterprise Server 12 SP5	kernel-default	Analysis
SUSE Linux Enterprise Server 12 SP5	kernel-source	Analysis
SUSE Linux Enterprise Server 15 LTSS	kernel-default	Analysis
SUSE Linux Enterprise Server 15 LTSS	kernel-source	Analysis
SUSE Linux Enterprise Server ESPOS 15	kernel-default	Analysis
SUSE Linux Enterprise Server ESPOS 15	kernel-source	Analysis
SUSE Linux Enterprise Server for SAP Applications 12	kernel-default	Analysis
SUSE Linux Enterprise Server for SAP Applications 12	kernel-source	Analysis
SUSE Linux Enterprise Server for SAP Applications 12 SP2	kernel-default	Analysis
SUSE Linux Enterprise Server for SAP Applications 12 SP2	kernel-source	Analysis
SUSE Linux Enterprise Server for SAP Applications 12 SP2	kgraft-patch-SLE12-SP2_Update_0	Released
SUSE Linux Enterprise Server for SAP Applications 12 SP3	kernel-default	Analysis
SUSE Linux Enterprise Server for SAP Applications 12 SP3	kernel-source	Analysis
SUSE Linux Enterprise Server for SAP Applications 12 SP4	kernel-default	Analysis
SUSE Linux Enterprise Server for SAP Applications 12 SP4	kernel-source	Analysis
SUSE Linux Enterprise Server for SAP Applications 12 SP5	kernel-default	Analysis
SUSE Linux Enterprise Server for SAP Applications 12 SP5	kernel-source	Analysis
SUSE Linux Enterprise Server for SAP Applications 15	kernel-default	Analysis
SUSE Linux Enterprise Server for SAP Applications 15	kernel-source	Analysis
SUSE OpenStack Cloud 7	kernel-default	Unsupported
SUSE OpenStack Cloud 7	kernel-source	Unsupported
SUSE OpenStack Cloud 7	kgraft-patch-SLE12-SP2_Update_0	Released
SUSE OpenStack Cloud 8	kernel-default	Analysis
SUSE OpenStack Cloud 8	kernel-source	Analysis
SUSE OpenStack Cloud 9	kernel-default	Analysis
SUSE OpenStack Cloud 9	kernel-source	Analysis
SUSE OpenStack Cloud Crowbar 8	kernel-default	Analysis
SUSE OpenStack Cloud Crowbar 8	kernel-source	Analysis
SUSE OpenStack Cloud Crowbar 9	kernel-default	Analysis
SUSE OpenStack Cloud Crowbar 9	kernel-source	Analysis