← العودة للجدول
CVE-2017-13715
CVE-2017-13715 — The __skb_flow_dissect function in net/core/flow_dissector.c in the Linux kernel
📅 2017-08-29
🔴 Critical 🔥 No NVD DDoS Linux CVSS 9.8 🎯 EPSS 13.13%

📋 الوصف الكامل

The __skb_flow_dissect function in net/core/flow_dissector.c in the Linux kernel before 4.3 does not ensure that n_proto, ip_proto, and thoff are initialized, which allows remote attackers to cause a denial of service (system crash) or possibly execute arbitrary code via a single crafted MPLS packet.

💻 الأنظمة المتأثرة

Linux Kernel 6.x/5.15 LTS

⚠️ نوع التهديد

DDoS

🔗 CVE ID

CVE-2017-13715

📡 المصدر

NVD

✅ الحلول والتخفيف

Refer to CVE-2017-13715 NVD advisory

🔗 المصدر الأصلي ← 📘 NVD ← ⚡ CISA KEV ←