{"id":"CVE-2017-9076","published":"2017-05-19T06:25:00Z","modified":"2024-08-05T16:55:22Z","title":"The dccp_v6_request_recv_sock function in net/dccp/ipv6.c in the Linux kernel through 4.11.1 mishandles inheritance…","vendor":null,"product":null,"tier":"tail","description":{"text":"The dccp_v6_request_recv_sock function in net/dccp/ipv6.c in the Linux kernel through 4.11.1 mishandles inheritance, which allows local users to cause a denial of service or possibly have unspecified other impact via crafted system calls, a related issue to CVE-2017-8890.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.00366,"percentile":0.30349,"provenance":"source"},"cwes":[],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=83eaddab4378db256d00d295bda6ca997cd13a52","tags":["x_refsource_CONFIRM"]},{"url":"https://patchwork.ozlabs.org/patch/760370/","tags":["x_refsource_CONFIRM"]},{"url":"https://source.android.com/security/bulletin/2017-09-01","tags":["x_refsource_CONFIRM"]},{"url":"http://www.securityfocus.com/bid/98586","tags":["vdb-entry","x_refsource_BID"]},{"url":"https://access.redhat.com/errata/RHSA-2017:2669","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1854","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://github.com/torvalds/linux/commit/83eaddab4378db256d00d295bda6ca997cd13a52","tags":["x_refsource_CONFIRM"]},{"url":"https://access.redhat.com/errata/RHSA-2017:2077","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"http://www.debian.org/security/2017/dsa-3886","tags":["vendor-advisory","x_refsource_DEBIAN"]},{"url":"https://access.redhat.com/errata/RHSA-2017:1842","tags":["vendor-advisory","x_refsource_REDHAT"]}],"priority":{"score":6.1,"factors":[{"name":"EPSS percentile","points":6.07}]},"euvd":{"id":"EUVD-2017-18015","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-cve-2012-3552-family-cve-2012-3552","parents":[{"from":"CVE-2012-3552","to":"CVE-2017-9076","relation":"related","confidence":"medium","kind":"lineage","evidence":[{"kind":"same-code","provenance":"machine","files":["net/dccp/ipv6.c","net/ipv6/tcp_ipv6.c"],"commits":["https://github.com/torvalds/linux/commit/f6d8bd051c391c1c0458a30b2a7abcd939329259","https://github.com/torvalds/linux/commit/83eaddab4378db256d00d295bda6ca997cd13a52"],"basis":"shared function","functions":["sock"]}]},{"from":"CVE-2017-8890","to":"CVE-2017-9076","relation":"related","confidence":"low","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"related","quote":"…tion in net/dccp/ipv6.c in the Linux kernel through 4.11.1 mishandles inheritance, which allows local users to cause a denial of service or possibly have unspecified other impact via crafted system calls, a related issue to CVE-2017-8890.","from":"CVE.org","in":"CVE-2017-9076"}]}]}}