ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2017-5986

—
CVSS 3.0
5.5 medium
EPSS
1%p65
Published
()
Modified
Description

Race condition in the sctp_wait_for_sndbuf function in net/sctp/socket.c in the Linux kernel before 4.9.11 allows local users to cause a denial of service (assertion failure and panic) via a multithreaded application that peels off an association in a certain buffer-full state.

Vendors
linux
Products
linux kernel
Weakness
CWE-362, CWE-617
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
NVD CVE.org GitHub PoCs EPSS (1.2%)

In the news

No ingested article mentions this CVE yet.