CVE-2017-17853 - log back

CVE-2017-17853 created at 25 Sep 2019 19:31:40
Severity
+ Medium
Remote
+ Local
Type
+ Denial of service
Description
+ It has been discovered kernel/bpf/verifier.c in the Linux kernel before 4.14.9 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging incorrect BPF_RSH signed bounds calculations.
References
+ https://bugs.chromium.org/p/project-zero/issues/detail?id=1454
+ http://www.openwall.com/lists/oss-security/2017/12/21/2
+ https://git.kernel.org/linus/4374f256ce8182019353c0c639bb8d0695b4c941
Notes
+ Workaround by disabling unprivileged bpf:
+ sysctl -w kernel.unprivileged_bpf_disabled=1