FICHE CVE

CVE-2017-9242

Publiée le 2017-05-27 · Dernière modification le 2026-06-17

The __ip6_append_data function in net/ipv6/ip6_output.c in the Linux kernel through 4.11.3 is too late in checking whether an overwrite of an skb data structure may occur, which allows local users to cause a denial of service (system crash) via crafted system calls.

CVSS 3.05.5 MOYENNE

Type de faiblesse

Validation des entrées insuffisante · CWE-20