UBUNTU-CVE-2017-14489
The iscsi_if_rx function in drivers/scsi/scsi_transport_iscsi.c in the Linux kernel through 4.13.2 allows local users to cause a denial of service (panic) by leveraging incorrect length validation.
02 / AFFECTED SOFTWARE
Affected packages
126 explicit affected versions
40 explicit affected versions
62 explicit affected versions
21 explicit affected versions
6 explicit affected versions
5 explicit affected versions
18 explicit affected versions
26 explicit affected versions
3 explicit affected versions
38 explicit affected versions
35 explicit affected versions
26 explicit affected versions
51 explicit affected versions
6 explicit affected versions
12 explicit affected versions
1 explicit affected versions
1 explicit affected versions
23 explicit affected versions
1 explicit affected versions
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
The iscsi_if_rx function in drivers/scsi/scsi_transport_iscsi.c in the Linux kernel through 4.13.2 allows local users to cause a denial of service (panic) by leveraging incorrect length validation.
05 / REFERENCES
Further evidence
- https://bugzilla.redhat.com/show_bug.cgi?id=1490421
- https://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi.git/commit/drivers/scsi/scsi_transport_iscsi.c?h=fixes&id=c88f0e6b06f4092995688211a631bb436125d77b
- https://patchwork.kernel.org/patch/9923803/
- https://ubuntu.com/security/CVE-2017-14489
- https://ubuntu.com/security/notices/USN-3469-1
- https://ubuntu.com/security/notices/USN-3469-2
- https://ubuntu.com/security/notices/USN-3487-1
- https://ubuntu.com/security/notices/USN-3583-1
- https://ubuntu.com/security/notices/USN-3583-2
- https://www.cve.org/CVERecord?id=CVE-2017-14489