---

CVE-2017-6074 - log back

CVE-2017-6074 created at 25 Sep 2019 19:31:40
Severity	+ High
Remote	+ Local
Type	+ Privilege escalation
Description	+ A use-after-free vulnerability has been discovered in the DCCP implementation in the Linux kernel. The dccp_rcv_state_process function in net/dccp/input.c in the Linux kernel through 4.9.11 mishandles DCCP_PKT_REQUEST packet data structures in the LISTEN state. A local unprivileged user could use this flaw to alter the kernel memory, allowing them to escalate their privileges on the system via an application that makes an IPV6_RECVPKTINFO setsockopt system call.
References	+ https://github.com/torvalds/linux/commit/5edabca9d4cff7f1f2b68f0bac55ef99d9798ba4 + https://patchwork.ozlabs.org/patch/728808/
Notes