Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Chunyu Wang

#34426of 56,337
7.8Total CVSS
Vulnerabilities · 1
PT-2017-3308
7.8
2017-10-19
Linux · Linux Kernel · CVE-2017-15115
**Name of the Vulnerable Software and Affected Versions** Linux kernel versions prior to 4.14 **Description** The issue is related to the sctp do peeloff function in the Linux kernel, which does not properly check the intended netns during a peel-off action. This can lead to a denial of service, causing a system crash due to a use-after-free error. Local users can exploit this by making crafted system calls, potentially resulting in unspecified other impacts. **Recommendations** For Linux kernel versions prior to 4.14, update to version 4.14 or later to resolve the issue. As a temporary workaround, consider restricting access to the sctp do peeloff function to minimize the risk of exploitation.