---

CVE-2017-17862 - log back

CVE-2017-17862 created at 25 Sep 2019 19:31:40
Severity	+ Medium
Remote	+ Local
Type	+ Denial of service
Description	+ It has been discovered that kernel/bpf/verifier.c in the Linux kernel before 4.14.9 and 4.9.72 ignore unreachable code, even though it would still be processed by JIT compilers. This behavior, also considered an improper branch-pruning logic issue, could possibly be used by local users for denial of service.
References	+ https://bugs.chromium.org/p/project-zero/issues/detail?id=1454 + http://www.openwall.com/lists/oss-security/2017/12/21/2 + https://git.kernel.org/linus/c131187db2d3fa2f8bf32fdf4e9a4ef805168467
Notes	+ Workaround by disabling unprivileged bpf: + sysctl -w kernel.unprivileged_bpf_disabled=1