CVE-2017-7477
Heap-based buffer overflow in drivers/net/macsec.c in the MACsec module in the Linux kernel...
Heap-based buffer overflow in drivers/net/macsec.c in the MACsec module in the Linux kernel through 4.10.12 allows attackers to cause a denial of service or possibly have unspecified other impact by leveraging the use of a MAX_SKB_FRAGS+1 size in conjunction with the NETIF_F_FRAGLIST feature, leading to an error in the skb_to_sgvec function.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- High
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
7.0
Heap-based buffer overflow in drivers/net/macsec.c in the MACsec module in the Linux kernel through 4.10.12 allows attackers to cause a denial of service or possibly have unspecified other impact by leveraging the use of a MAX_SKB_FRAGS+1 size in conjunction with the NETIF_F_FRAGLIST feature, leading to an error in the skb_to_sgvec function.
- Record
CVE-2017-7477- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 6.9 Medium
AV:L/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Heap-based buffer overflow in drivers/net/macsec.c in the MACsec module in the Linux kernel through 4.10.12 allows attackers to cause a denial of service or possibly have unspecified other impact by leveraging the use of a MAX_SKB_FRAGS+1 size in conjunction with the NETIF_F_FRAGLIST feature, leading to an error in the skb_to_sgvec function.
- Record
CVE-2017-7477- Updated
- 2026-11-02
EUVDEUVD-2017-16498 No score
Heap-based buffer overflow in drivers/net/macsec.c in the MACsec module in the Linux kernel through 4.10.12 allows attackers to cause a denial of service or possibly have unspecified other impact by leveraging the use of a MAX_SKB_FRAGS+1 size in conjunction with the NETIF_F_FRAGLIST feature, leading to an error in the skb_to_sgvec function.
- Record
EUVD-2017-16498- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rj7x-xw78-6fjw
7.0
Heap-based buffer overflow in drivers/net/macsec.c in the MACsec module in the Linux kernel...
Heap-based buffer overflow in drivers/net/macsec.c in the MACsec module in the Linux kernel through 4.10.12 allows attackers to cause a denial of service or possibly have unspecified other impact by leveraging the use of a MAX_SKB_FRAGS+1 size in conjunction with the NETIF_F_FRAGLIST feature, leading to an error in the skb_to_sgvec function.
- Record
GHSA-rj7x-xw78-6fjw- CVSS 3.0
- 7.0 High
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-119
- Updated
- 2026-11-02
OSV
7.0
Heap-based buffer overflow in drivers/net/macsec.c in the MACsec module in the Linux kernel through 4.10.12 allows attackers to cause a denial of service or possibly have unspecified other impact by leveraging the use of a MAX_SKB_FRAGS+1 size in conjunction with the NETIF_F_FRAGLIST feature, leading to an error in the skb_to_sgvec function.
- Record
CVE-2017-7477- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2017-7477
7.0
Heap-based buffer overflow in drivers/net/macsec.c in the MACsec module in the Linux kernel through 4.10.12 allows attackers to cause a denial of service or possibly have unspecified other impact by leveraging the use of a MAX_SKB_FRAGS+1 size in conjunction with the NETIF_F_FRAGLIST feature, leading to an error in the skb_to_sgvec function.
- Record
DEBIAN-CVE-2017-7477- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 4 moreShow less
OSVRHSA-2017:1615
8.1
Red Hat Security Advisory: kernel security and bug fix update
- Record
RHSA-2017:1615- CVSS 3.0
- 8.1 High
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2017:1616
8.1
Red Hat Security Advisory: kernel-rt security and bug fix update
- Record
RHSA-2017:1616- CVSS 3.0
- 8.1 High
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2017-7477
7.0
Heap-based buffer overflow in drivers/net/macsec.c in the MACsec module in the Linux kernel through 4.10.12 allows attackers to cause a denial of service or possibly have unspecified other impact by leveraging the use of a MAX_SKB_FRAGS+1 size in conjunction with the NETIF_F_FRAGLIST feature, leading to an error in the skb_to_sgvec function.
- Record
UBUNTU-CVE-2017-7477- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 3.0
- 7.0 High
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUSN-3292-2 No score
linux-hwe vulnerability
USN-3292-1 fixed a vulnerability in the Linux kernel for Ubuntu 16.10. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 16.10 for Ubuntu 16.04 LTS.
Jason Donenfeld discovered a heap overflow in the MACsec module in the Linux kernel. An attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code.
- Record
USN-3292-2- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
linuxDebian:12 |
before 4.9.25-1 | 4.9.25-1 |
linuxDebian:13 |
before 4.9.25-1 | 4.9.25-1 |
linuxDebian:14 |
before 4.9.25-1 | 4.9.25-1 |
kernelRed Hat:enterprise_linux:7::client From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-abi-whitelistsRed Hat:enterprise_linux:7::client From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-debugRed Hat:enterprise_linux:7::client From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-debug-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-debug-develRed Hat:enterprise_linux:7::client From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:7::client From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
Show 102 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-develRed Hat:enterprise_linux:7::client From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-docRed Hat:enterprise_linux:7::client From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-headersRed Hat:enterprise_linux:7::client From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-toolsRed Hat:enterprise_linux:7::client From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-tools-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-tools-libsRed Hat:enterprise_linux:7::client From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
perfRed Hat:enterprise_linux:7::client From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
perf-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
python-perfRed Hat:enterprise_linux:7::client From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
python-perf-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-tools-libs-develRed Hat:enterprise_linux:7::client From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernelRed Hat:enterprise_linux:7::computenode From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-abi-whitelistsRed Hat:enterprise_linux:7::computenode From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-debugRed Hat:enterprise_linux:7::computenode From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-debug-debuginfoRed Hat:enterprise_linux:7::computenode From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-debug-develRed Hat:enterprise_linux:7::computenode From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-debuginfoRed Hat:enterprise_linux:7::computenode From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:7::computenode From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-develRed Hat:enterprise_linux:7::computenode From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-docRed Hat:enterprise_linux:7::computenode From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-headersRed Hat:enterprise_linux:7::computenode From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-toolsRed Hat:enterprise_linux:7::computenode From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-tools-debuginfoRed Hat:enterprise_linux:7::computenode From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-tools-libsRed Hat:enterprise_linux:7::computenode From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
perfRed Hat:enterprise_linux:7::computenode From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
perf-debuginfoRed Hat:enterprise_linux:7::computenode From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
python-perfRed Hat:enterprise_linux:7::computenode From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
python-perf-debuginfoRed Hat:enterprise_linux:7::computenode From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-tools-libs-develRed Hat:enterprise_linux:7::computenode From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernelRed Hat:enterprise_linux:7::server From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-abi-whitelistsRed Hat:enterprise_linux:7::server From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-bootwrapperRed Hat:enterprise_linux:7::server From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-debugRed Hat:enterprise_linux:7::server From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-debug-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-debug-develRed Hat:enterprise_linux:7::server From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-debuginfo-common-ppc64Red Hat:enterprise_linux:7::server From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-debuginfo-common-ppc64leRed Hat:enterprise_linux:7::server From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-debuginfo-common-s390xRed Hat:enterprise_linux:7::server From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:7::server From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-develRed Hat:enterprise_linux:7::server From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-docRed Hat:enterprise_linux:7::server From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-headersRed Hat:enterprise_linux:7::server From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-kdumpRed Hat:enterprise_linux:7::server From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-kdump-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-kdump-develRed Hat:enterprise_linux:7::server From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-toolsRed Hat:enterprise_linux:7::server From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-tools-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-tools-libsRed Hat:enterprise_linux:7::server From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
perfRed Hat:enterprise_linux:7::server From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
perf-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
python-perfRed Hat:enterprise_linux:7::server From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
python-perf-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-tools-libs-develRed Hat:enterprise_linux:7::server From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernelRed Hat:enterprise_linux:7::workstation From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-abi-whitelistsRed Hat:enterprise_linux:7::workstation From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-debugRed Hat:enterprise_linux:7::workstation From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-debug-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-debug-develRed Hat:enterprise_linux:7::workstation From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:7::workstation From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-develRed Hat:enterprise_linux:7::workstation From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-docRed Hat:enterprise_linux:7::workstation From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-headersRed Hat:enterprise_linux:7::workstation From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-toolsRed Hat:enterprise_linux:7::workstation From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-tools-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-tools-libsRed Hat:enterprise_linux:7::workstation From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
perfRed Hat:enterprise_linux:7::workstation From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
perf-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
python-perfRed Hat:enterprise_linux:7::workstation From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
python-perf-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-tools-libs-develRed Hat:enterprise_linux:7::workstation From an advisory covering 5 CVEs |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-rtRed Hat:rhel_extras_rt:7 From an advisory covering 7 CVEs |
before 0:3.10.0-514.26.1.rt56.442.el7 | 0:3.10.0-514.26.1.rt56.442.el7 |
kernel-rt-debugRed Hat:rhel_extras_rt:7 From an advisory covering 7 CVEs |
before 0:3.10.0-514.26.1.rt56.442.el7 | 0:3.10.0-514.26.1.rt56.442.el7 |
kernel-rt-debug-debuginfoRed Hat:rhel_extras_rt:7 From an advisory covering 7 CVEs |
before 0:3.10.0-514.26.1.rt56.442.el7 | 0:3.10.0-514.26.1.rt56.442.el7 |
kernel-rt-debug-develRed Hat:rhel_extras_rt:7 From an advisory covering 7 CVEs |
before 0:3.10.0-514.26.1.rt56.442.el7 | 0:3.10.0-514.26.1.rt56.442.el7 |
kernel-rt-debug-kvmRed Hat:rhel_extras_rt:7 From an advisory covering 7 CVEs |
before 0:3.10.0-514.26.1.rt56.442.el7 | 0:3.10.0-514.26.1.rt56.442.el7 |
kernel-rt-debug-kvm-debuginfoRed Hat:rhel_extras_rt:7 From an advisory covering 7 CVEs |
before 0:3.10.0-514.26.1.rt56.442.el7 | 0:3.10.0-514.26.1.rt56.442.el7 |
kernel-rt-debuginfoRed Hat:rhel_extras_rt:7 From an advisory covering 7 CVEs |
before 0:3.10.0-514.26.1.rt56.442.el7 | 0:3.10.0-514.26.1.rt56.442.el7 |
kernel-rt-debuginfo-common-x86_64Red Hat:rhel_extras_rt:7 From an advisory covering 7 CVEs |
before 0:3.10.0-514.26.1.rt56.442.el7 | 0:3.10.0-514.26.1.rt56.442.el7 |
kernel-rt-develRed Hat:rhel_extras_rt:7 From an advisory covering 7 CVEs |
before 0:3.10.0-514.26.1.rt56.442.el7 | 0:3.10.0-514.26.1.rt56.442.el7 |
kernel-rt-docRed Hat:rhel_extras_rt:7 From an advisory covering 7 CVEs |
before 0:3.10.0-514.26.1.rt56.442.el7 | 0:3.10.0-514.26.1.rt56.442.el7 |
kernel-rt-kvmRed Hat:rhel_extras_rt:7 From an advisory covering 7 CVEs |
before 0:3.10.0-514.26.1.rt56.442.el7 | 0:3.10.0-514.26.1.rt56.442.el7 |
kernel-rt-kvm-debuginfoRed Hat:rhel_extras_rt:7 From an advisory covering 7 CVEs |
before 0:3.10.0-514.26.1.rt56.442.el7 | 0:3.10.0-514.26.1.rt56.442.el7 |
kernel-rt-traceRed Hat:rhel_extras_rt:7 From an advisory covering 7 CVEs |
before 0:3.10.0-514.26.1.rt56.442.el7 | 0:3.10.0-514.26.1.rt56.442.el7 |
kernel-rt-trace-debuginfoRed Hat:rhel_extras_rt:7 From an advisory covering 7 CVEs |
before 0:3.10.0-514.26.1.rt56.442.el7 | 0:3.10.0-514.26.1.rt56.442.el7 |
kernel-rt-trace-develRed Hat:rhel_extras_rt:7 From an advisory covering 7 CVEs |
before 0:3.10.0-514.26.1.rt56.442.el7 | 0:3.10.0-514.26.1.rt56.442.el7 |
kernel-rt-trace-kvmRed Hat:rhel_extras_rt:7 From an advisory covering 7 CVEs |
before 0:3.10.0-514.26.1.rt56.442.el7 | 0:3.10.0-514.26.1.rt56.442.el7 |
kernel-rt-trace-kvm-debuginfoRed Hat:rhel_extras_rt:7 From an advisory covering 7 CVEs |
before 0:3.10.0-514.26.1.rt56.442.el7 | 0:3.10.0-514.26.1.rt56.442.el7 |
linux-hweUbuntu:16.04:LTS |
before 4.8.0-56.61~16.04.1, plus listed versions 4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1 Show 7 moreShow less4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.1 |
4.8.0-56.61~16.04.1 |
linux-azureUbuntu:18.04:LTS |
All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 39 moreShow less4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38 |
None known |
linux-gcpUbuntu:18.04:LTS |
All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 33 moreShow less4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35 |
None known |
linux-hweUbuntu:18.04:LTS |
All versions, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 38 moreShow less4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72 |
None known |
linux-azure-fdeUbuntu:20.04:LTS |
All versions, plus listed versions 5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1 Show 21 moreShow less5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1 |
None known |
linux-gkeUbuntu:20.04:LTS |
All versions, plus listed versions 5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41 Show 45 moreShow less5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111 |
None known |
linux-raspi2Ubuntu:20.04:LTS |
All versions, plus listed versions 5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6 |
None known |
linux-riscvUbuntu:20.04:LTS |
All versions, plus listed versions 5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34 Show 7 moreShow less5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45 |
None known |
linux-intel-iot-realtimeUbuntu:22.04:LTS |
All versions, plus listed versions 5.15.0-1073.75 |
None known |
linux-realtimeUbuntu:22.04:LTS |
All versions, plus listed versions 5.15.0-1032.35 |
None known |
linux-riscvUbuntu:22.04:LTS |
All versions, plus listed versions 5.13.0-1004.45.13.0-1006.6+22.04.15.13.0-1007.7+22.04.15.13.0-1010.11+22.04.15.15.0-1004.4 Show 18 moreShow less5.15.0-1005.55.15.0-1006.65.15.0-1007.75.15.0-1008.85.15.0-1011.125.15.0-1012.135.15.0-1014.165.15.0-1015.175.15.0-1016.185.15.0-1017.195.15.0-1018.215.15.0-1019.225.15.0-1020.235.15.0-1022.265.15.0-1023.275.15.0-1026.305.15.0-1027.315.15.0-1028.32 |
None known |
linux-raspi-realtimeUbuntu:24.04:LTS |
All versions, plus listed versions 6.8.0-2019.20 |
None known |
linux-hweUbuntu:16.04:LTS |
before 4.8.0-52.55~16.04.1, plus listed versions 4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1 Show 4 moreShow less4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.1 |
4.8.0-52.55~16.04.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2017-7477 is a high vulnerability (CVSS 7.0) in Linux Kernel, published April 25, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.39%, the 33rd percentile. Fixed in linux 4.9.25-1.
References
git.kernel.org/pub/scm/linux/kernel/git/davem/net.git/commit?id=4d6fa57b4dab0d77f4d8e9d9c73d1e63f6fe8fee
securitytracker.com/id/1038500
access.redhat.com/errata/RHSA-2017:1615
access.redhat.com/errata/RHSA-2017:1616
bugzilla.redhat.com/show_bug.cgi?id=1445207
git.kernel.org/pub/scm/linux/kernel/git/davem/net.git/commit?id=5294b83086cc1c35b4efeca03644cf9d12282e5b
Show 45 moreShow less
securityfocus.com/bid/98014
nvd.nist.gov/vuln/detail/CVE-2017-7477
access.redhat.com/security/cve/CVE-2017-7477
github.com/advisories/GHSA-rj7x-xw78-6fjw
security-tracker.debian.org/tracker/CVE-2017-7477
access.redhat.com/security/updates/classification
access.redhat.com/articles/3090941
bugzilla.redhat.com/show_bug.cgi?id=1414735
bugzilla.redhat.com/show_bug.cgi?id=1426542
bugzilla.redhat.com/show_bug.cgi?id=1443615
bugzilla.redhat.com/show_bug.cgi?id=1446103
security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1615.json
access.redhat.com/security/cve/CVE-2017-2583
cve.org/CVERecord?id=CVE-2017-2583
nvd.nist.gov/vuln/detail/CVE-2017-2583
access.redhat.com/security/cve/CVE-2017-6214
cve.org/CVERecord?id=CVE-2017-6214
nvd.nist.gov/vuln/detail/CVE-2017-6214
cve.org/CVERecord?id=CVE-2017-7477
access.redhat.com/security/cve/CVE-2017-7645
cve.org/CVERecord?id=CVE-2017-7645
nvd.nist.gov/vuln/detail/CVE-2017-7645
access.redhat.com/security/cve/CVE-2017-7895
cve.org/CVERecord?id=CVE-2017-7895
nvd.nist.gov/vuln/detail/CVE-2017-7895
bugzilla.redhat.com/show_bug.cgi?id=1452742
bugzilla.redhat.com/show_bug.cgi?id=1455239
bugzilla.redhat.com/show_bug.cgi?id=1461333
security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1616.json
access.redhat.com/security/cve/CVE-2017-1000364
cve.org/CVERecord?id=CVE-2017-1000364
nvd.nist.gov/vuln/detail/CVE-2017-1000364
access.redhat.com/security/vulnerabilities/stackguard
qualys.com/2017/06/19/stack-clash/stack-clash.txt
access.redhat.com/security/cve/CVE-2017-1000379
bugzilla.redhat.com/show_bug.cgi?id=1462165
cve.org/CVERecord?id=CVE-2017-1000379
nvd.nist.gov/vuln/detail/CVE-2017-1000379
ubuntu.com/security/CVE-2017-7477
openwall.com/lists/oss-security/2017/04/24/4
openwall.com/lists/oss-security/2017/04/25/7
openwall.com/lists/oss-security/2017/04/26/8
ubuntu.com/security/notices/USN-3293-1
ubuntu.com/security/notices/USN-3292-1
ubuntu.com/security/notices/USN-3292-2
Left out here: 1 version. The JSON record has them.