Upstream information
Description
The sctp_v6_create_accept_sk function in net/sctp/ipv6.c in the Linux kernel through 4.11.1 mishandles inheritance, which allows local users to cause a denial of service or possibly have unspecified other impact via crafted system calls, a related issue to CVE-2017-8890.SUSE information
| National Vulnerability Database | SUSE | |
|---|---|---|
| Base Score | 7.15 | 2.11 |
| Vector | AV:L/AC:L/Au:N/C:C/I:C/A:C | AV:L/AC:L/Au:N/C:N/I:N/A:P |
| Access Vector | Local | Local |
| Access Complexity | Low | Low |
| Authentication | None | None |
| Confidentiality Impact | Complete | None |
| Integrity Impact | Complete | None |
| Availability Impact | Complete | Partial |
| National Vulnerability Database | SUSE | |
|---|---|---|
| Base Score | 7.8 | 5.5 |
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
| Access Vector | Local | Local |
| Access Complexity | Low | Low |
| Privileges Required | Low | Low |
| User Interaction | None | None |
| Scope | Unchanged | Unchanged |
| Confidentiality Impact | High | None |
| Integrity Impact | High | None |
| Availability Impact | High | High |
- openSUSE-SU-2017:1513-1, published Thu, 8 Jun 2017 18:13:15 +0200 (CEST)
List of released packages
| Product(s) | Fixed package version(s) | References |
|---|---|---|
| openSUSE Leap 42.2 |
| Patchnames: openSUSE-2017-666 |
List of planned updates
The following information is the current evaluation information for this security issue. It might neither be accurate nor complete, Use at own risk.| Product(s) | Source package |
|---|---|
| kernel-source |
| kernel-source |
