The IPv6 fragmentation implementation in the Linux kernel through 4.11.1 does not consider that the nexthdr field may be associated with an invalid option, which allows local users to cause a denial of service (out-of-bounds read and BUG) or possibly have unspecified other impact via crafted socket and send system calls.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-9074.json"
[
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@2423496af35d94a87156b063ea5cedffc10a70a1",
"digest": {
"function_hash": "232781342085717301972166281157623273783",
"length": 1882.0
},
"id": "CVE-2017-9074-04e4abdb",
"deprecated": false,
"target": {
"file": "net/ipv6/ip6_offload.c",
"function": "ipv6_gso_segment"
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@2423496af35d94a87156b063ea5cedffc10a70a1",
"digest": {
"line_hashes": [
"178439147672974016832634057160538051611",
"79732162933697182720365886154996725429",
"63529047224924664904566827537457168688",
"16625537079443396962253531979562097368",
"163649246161693334664248361358971730221",
"284471575077148454535013289324403037924",
"40570494920595428073686599024610287532",
"118826503334659950334190496030156458990",
"217137789350261034437968379265748859436",
"269549990445890673725799987670745579519",
"164083631191287403865151793303886321985",
"18634244363445475114514917823885369281",
"191773208632104010665148705288704767966",
"81613273387955226303439589868971418129",
"149900904804861747162113940406661321553",
"237739594291162510810408957586109458893",
"217904900162679901291646936385924878806",
"70074317525270751765414966769049954560",
"81735212373070811020542583392443644922"
],
"threshold": 0.9
},
"id": "CVE-2017-9074-1dd79c52",
"deprecated": false,
"target": {
"file": "net/ipv6/output_core.c"
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@2423496af35d94a87156b063ea5cedffc10a70a1",
"digest": {
"line_hashes": [
"202193290820758334410341594650788513668",
"31435500063878880100652364848989903548",
"334560329365353206422108226290410058777",
"149118244186345608527920823611871391901"
],
"threshold": 0.9
},
"id": "CVE-2017-9074-257b3879",
"deprecated": false,
"target": {
"file": "net/ipv6/ip6_offload.c"
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@2423496af35d94a87156b063ea5cedffc10a70a1",
"digest": {
"line_hashes": [
"333489749673640615602240046007774188270",
"254901981229186442321388772032313478156",
"285625596920217474653797974708947333726",
"175874183872932740795981441244978105388"
],
"threshold": 0.9
},
"id": "CVE-2017-9074-2e4ba298",
"deprecated": false,
"target": {
"file": "net/ipv6/udp_offload.c"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@2423496af35d94a87156b063ea5cedffc10a70a1",
"digest": {
"function_hash": "39254189576232188788582172796583058766",
"length": 1967.0
},
"id": "CVE-2017-9074-97252c29",
"deprecated": false,
"target": {
"file": "net/ipv6/udp_offload.c",
"function": "udp6_ufo_fragment"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@2423496af35d94a87156b063ea5cedffc10a70a1",
"digest": {
"function_hash": "228964870500140277548886741604612553697",
"length": 5570.0
},
"id": "CVE-2017-9074-b87a908f",
"deprecated": false,
"target": {
"file": "net/ipv6/ip6_output.c",
"function": "ip6_fragment"
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@2423496af35d94a87156b063ea5cedffc10a70a1",
"digest": {
"line_hashes": [
"251348174401364408290141059516348907384",
"314423487648027541860896024280943405941",
"302253063928205147070017083302099652558",
"156551257443969298601423320148911684238"
],
"threshold": 0.9
},
"id": "CVE-2017-9074-c63800a0",
"deprecated": false,
"target": {
"file": "net/ipv6/ip6_output.c"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@2423496af35d94a87156b063ea5cedffc10a70a1",
"digest": {
"function_hash": "253215090070299853803616542605298034815",
"length": 675.0
},
"id": "CVE-2017-9074-e71f8695",
"deprecated": false,
"target": {
"file": "net/ipv6/output_core.c",
"function": "ip6_find_1stfragopt"
}
}
]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-9074.json"
[
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/2423496af35d94a87156b063ea5cedffc10a70a1",
"digest": {
"function_hash": "253215090070299853803616542605298034815",
"length": 675.0
},
"id": "CVE-2017-9074-30e1ad4e",
"deprecated": false,
"target": {
"file": "net/ipv6/output_core.c",
"function": "ip6_find_1stfragopt"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/2423496af35d94a87156b063ea5cedffc10a70a1",
"digest": {
"function_hash": "228964870500140277548886741604612553697",
"length": 5570.0
},
"id": "CVE-2017-9074-798733bc",
"deprecated": false,
"target": {
"file": "net/ipv6/ip6_output.c",
"function": "ip6_fragment"
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/2423496af35d94a87156b063ea5cedffc10a70a1",
"digest": {
"line_hashes": [
"178439147672974016832634057160538051611",
"79732162933697182720365886154996725429",
"63529047224924664904566827537457168688",
"16625537079443396962253531979562097368",
"163649246161693334664248361358971730221",
"284471575077148454535013289324403037924",
"40570494920595428073686599024610287532",
"118826503334659950334190496030156458990",
"217137789350261034437968379265748859436",
"269549990445890673725799987670745579519",
"164083631191287403865151793303886321985",
"18634244363445475114514917823885369281",
"191773208632104010665148705288704767966",
"81613273387955226303439589868971418129",
"149900904804861747162113940406661321553",
"237739594291162510810408957586109458893",
"217904900162679901291646936385924878806",
"70074317525270751765414966769049954560",
"81735212373070811020542583392443644922"
],
"threshold": 0.9
},
"id": "CVE-2017-9074-8e2d7d2c",
"deprecated": false,
"target": {
"file": "net/ipv6/output_core.c"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/2423496af35d94a87156b063ea5cedffc10a70a1",
"digest": {
"function_hash": "232781342085717301972166281157623273783",
"length": 1882.0
},
"id": "CVE-2017-9074-b07a779a",
"deprecated": false,
"target": {
"file": "net/ipv6/ip6_offload.c",
"function": "ipv6_gso_segment"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/2423496af35d94a87156b063ea5cedffc10a70a1",
"digest": {
"function_hash": "39254189576232188788582172796583058766",
"length": 1967.0
},
"id": "CVE-2017-9074-beb711e8",
"deprecated": false,
"target": {
"file": "net/ipv6/udp_offload.c",
"function": "udp6_ufo_fragment"
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/2423496af35d94a87156b063ea5cedffc10a70a1",
"digest": {
"line_hashes": [
"333489749673640615602240046007774188270",
"254901981229186442321388772032313478156",
"285625596920217474653797974708947333726",
"175874183872932740795981441244978105388"
],
"threshold": 0.9
},
"id": "CVE-2017-9074-de32a8b2",
"deprecated": false,
"target": {
"file": "net/ipv6/udp_offload.c"
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/2423496af35d94a87156b063ea5cedffc10a70a1",
"digest": {
"line_hashes": [
"251348174401364408290141059516348907384",
"314423487648027541860896024280943405941",
"302253063928205147070017083302099652558",
"156551257443969298601423320148911684238"
],
"threshold": 0.9
},
"id": "CVE-2017-9074-f67e1097",
"deprecated": false,
"target": {
"file": "net/ipv6/ip6_output.c"
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/2423496af35d94a87156b063ea5cedffc10a70a1",
"digest": {
"line_hashes": [
"202193290820758334410341594650788513668",
"31435500063878880100652364848989903548",
"334560329365353206422108226290410058777",
"149118244186345608527920823611871391901"
],
"threshold": 0.9
},
"id": "CVE-2017-9074-f6dc3f64",
"deprecated": false,
"target": {
"file": "net/ipv6/ip6_offload.c"
}
}
]