FlawAtlas
Search the atlas
UBUNTU-CVE-2017-9074 High

UBUNTU-CVE-2017-9074

The IPv6 fragmentation implementation in the Linux kernel through 4.11.1 does not consider that the nexthdr field may be associated with an invalid option, which allows local users to cause a denial of service (out-of-bounds read and BUG) or possibly have unspecified other impact via crafted socket and send system calls.

Exploit probability Not scored
Published May 19, 2017
Required by Not available
Last source change August 17, 2026

02 / AFFECTED SOFTWARE

Affected packages

Ubuntu:14.04:LTS linux

115 explicit affected versions

Ubuntu:14.04:LTS linux-lts-xenial

32 explicit affected versions

Ubuntu:16.04:LTS linux

54 explicit affected versions

Ubuntu:16.04:LTS linux-aws

12 explicit affected versions

Ubuntu:16.04:LTS linux-gke

10 explicit affected versions

Ubuntu:16.04:LTS linux-hwe

17 explicit affected versions

Ubuntu:16.04:LTS linux-raspi2

30 explicit affected versions

Ubuntu:16.04:LTS linux-snapdragon

27 explicit affected versions

Ubuntu:20.04:LTS linux-azure-fde

26 explicit affected versions

Ubuntu:20.04:LTS linux-gke

51 explicit affected versions

Ubuntu:20.04:LTS linux-raspi2

6 explicit affected versions

Ubuntu:20.04:LTS linux-riscv

12 explicit affected versions

Ubuntu:22.04:LTS linux-intel-iot-realtime

1 explicit affected versions

Ubuntu:22.04:LTS linux-realtime

1 explicit affected versions

Ubuntu:22.04:LTS linux-riscv

23 explicit affected versions

Ubuntu:24.04:LTS linux-azure-6.11

7 explicit affected versions

Ubuntu:24.04:LTS linux-gcp-6.11

7 explicit affected versions

Ubuntu:24.04:LTS linux-hwe-6.11

8 explicit affected versions

Ubuntu:24.04:LTS linux-lowlatency-hwe-6.11

7 explicit affected versions

Ubuntu:24.04:LTS linux-raspi-realtime

1 explicit affected versions

Ubuntu:Pro:20.04:LTS linux-azure-fde-5.15

61 explicit affected versions

03 / CONNECTIONS

Connected vulnerabilities

related USN-3342-1
related USN-3343-2
related USN-3345-1
related USN-3360-2

04 / EVIDENCE

Source records

Open Source Vulnerabilities UBUNTU-CVE-2017-9074

The IPv6 fragmentation implementation in the Linux kernel through 4.11.1 does not consider that the nexthdr field may be associated with an invalid option, which allows local users to cause a denial of service (out-of-bounds read and BUG) or possibly have unspecified other impact via crafted socket and send system calls.

View original source

05 / REFERENCES

Further evidence