CVE-2017-7477
Heap-based buffer overflow in drivers/net/macsec.c in the MACsec module in the Linux kernel...
7.0 HighFix available
Heap-based buffer overflow in drivers/net/macsec.c in the MACsec module in the Linux kernel through 4.10.12 allows attackers to cause a denial of service or possibly have unspecified other impact by leveraging the use of a MAX_SKB_FRAGS+1 size in conjunction with the NETIF_F_FRAGLIST feature, leading to an error in the skb_to_sgvec function.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- High
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
0.39%Down 1.7 points since Apr 14, 2021
What each source reports
NVD Score used
Heap-based buffer overflow in drivers/net/macsec.c in the MACsec module in the Linux kernel through 4.10.12 allows attackers to cause a denial of service or possibly have unspecified other impact by leveraging the use of a MAX_SKB_FRAGS+1 size in conjunction with the NETIF_F_FRAGLIST feature, leading to an error in the skb_to_sgvec function.
- Record
CVE-2017-7477- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 6.9 Medium
AV:L/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Heap-based buffer overflow in drivers/net/macsec.c in the MACsec module in the Linux kernel through 4.10.12 allows attackers to cause a denial of service or possibly have unspecified other impact by leveraging the use of a MAX_SKB_FRAGS+1 size in conjunction with the NETIF_F_FRAGLIST feature, leading to an error in the skb_to_sgvec function.
- Record
CVE-2017-7477- Updated
- 2026-11-02
EUVDEUVD-2017-16498 No score
Heap-based buffer overflow in drivers/net/macsec.c in the MACsec module in the Linux kernel through 4.10.12 allows attackers to cause a denial of service or possibly have unspecified other impact by leveraging the use of a MAX_SKB_FRAGS+1 size in conjunction with the NETIF_F_FRAGLIST feature, leading to an error in the skb_to_sgvec function.
- Record
EUVD-2017-16498- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rj7x-xw78-6fjw
Heap-based buffer overflow in drivers/net/macsec.c in the MACsec module in the Linux kernel...
Heap-based buffer overflow in drivers/net/macsec.c in the MACsec module in the Linux kernel through 4.10.12 allows attackers to cause a denial of service or possibly have unspecified other impact by leveraging the use of a MAX_SKB_FRAGS+1 size in conjunction with the NETIF_F_FRAGLIST feature, leading to an error in the skb_to_sgvec function.
- Record
GHSA-rj7x-xw78-6fjw- CVSS 3.0
- 7.0 High
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-119
- Updated
- 2026-11-02
OSV
Heap-based buffer overflow in drivers/net/macsec.c in the MACsec module in the Linux kernel through 4.10.12 allows attackers to cause a denial of service or possibly have unspecified other impact by leveraging the use of a MAX_SKB_FRAGS+1 size in conjunction with the NETIF_F_FRAGLIST feature, leading to an error in the skb_to_sgvec function.
- Record
CVE-2017-7477- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2017-7477
Heap-based buffer overflow in drivers/net/macsec.c in the MACsec module in the Linux kernel through 4.10.12 allows attackers to cause a denial of service or possibly have unspecified other impact by leveraging the use of a MAX_SKB_FRAGS+1 size in conjunction with the NETIF_F_FRAGLIST feature, leading to an error in the skb_to_sgvec function.
- Record
DEBIAN-CVE-2017-7477- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 4 moreShow less
OSVRHSA-2017:1615
Red Hat Security Advisory: kernel security and bug fix update
- Record
RHSA-2017:1615- CVSS 3.0
- 8.1 High
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2017:1616
Red Hat Security Advisory: kernel-rt security and bug fix update
- Record
RHSA-2017:1616- CVSS 3.0
- 8.1 High
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2017-7477
Heap-based buffer overflow in drivers/net/macsec.c in the MACsec module in the Linux kernel through 4.10.12 allows attackers to cause a denial of service or possibly have unspecified other impact by leveraging the use of a MAX_SKB_FRAGS+1 size in conjunction with the NETIF_F_FRAGLIST feature, leading to an error in the skb_to_sgvec function.
- Record
UBUNTU-CVE-2017-7477- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 3.0
- 7.0 High
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUSN-3292-2 No score
linux-hwe vulnerability
USN-3292-1 fixed a vulnerability in the Linux kernel for Ubuntu 16.10. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 16.10 for Ubuntu 16.04 LTS.
Jason Donenfeld discovered a heap overflow in the MACsec module in the Linux kernel. An attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code.
- Record
USN-3292-2- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
linuxDebian:12 |
before 4.9.25-1 | 4.9.25-1 |
linuxDebian:13 |
before 4.9.25-1 | 4.9.25-1 |
linuxDebian:14 |
before 4.9.25-1 | 4.9.25-1 |
kernelRed Hat:enterprise_linux:7::client |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-abi-whitelistsRed Hat:enterprise_linux:7::client |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-debugRed Hat:enterprise_linux:7::client |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-debug-debuginfoRed Hat:enterprise_linux:7::client |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-debug-develRed Hat:enterprise_linux:7::client |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-debuginfoRed Hat:enterprise_linux:7::client |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:7::client |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
Show 102 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-develRed Hat:enterprise_linux:7::client |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-docRed Hat:enterprise_linux:7::client |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-headersRed Hat:enterprise_linux:7::client |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-toolsRed Hat:enterprise_linux:7::client |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-tools-debuginfoRed Hat:enterprise_linux:7::client |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-tools-libsRed Hat:enterprise_linux:7::client |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
perfRed Hat:enterprise_linux:7::client |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
perf-debuginfoRed Hat:enterprise_linux:7::client |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
python-perfRed Hat:enterprise_linux:7::client |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
python-perf-debuginfoRed Hat:enterprise_linux:7::client |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-tools-libs-develRed Hat:enterprise_linux:7::client |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernelRed Hat:enterprise_linux:7::computenode |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-abi-whitelistsRed Hat:enterprise_linux:7::computenode |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-debugRed Hat:enterprise_linux:7::computenode |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-debug-debuginfoRed Hat:enterprise_linux:7::computenode |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-debug-develRed Hat:enterprise_linux:7::computenode |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-debuginfoRed Hat:enterprise_linux:7::computenode |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:7::computenode |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-develRed Hat:enterprise_linux:7::computenode |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-docRed Hat:enterprise_linux:7::computenode |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-headersRed Hat:enterprise_linux:7::computenode |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-toolsRed Hat:enterprise_linux:7::computenode |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-tools-debuginfoRed Hat:enterprise_linux:7::computenode |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-tools-libsRed Hat:enterprise_linux:7::computenode |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
perfRed Hat:enterprise_linux:7::computenode |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
perf-debuginfoRed Hat:enterprise_linux:7::computenode |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
python-perfRed Hat:enterprise_linux:7::computenode |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
python-perf-debuginfoRed Hat:enterprise_linux:7::computenode |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-tools-libs-develRed Hat:enterprise_linux:7::computenode |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernelRed Hat:enterprise_linux:7::server |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-abi-whitelistsRed Hat:enterprise_linux:7::server |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-bootwrapperRed Hat:enterprise_linux:7::server |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-debugRed Hat:enterprise_linux:7::server |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-debug-debuginfoRed Hat:enterprise_linux:7::server |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-debug-develRed Hat:enterprise_linux:7::server |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-debuginfoRed Hat:enterprise_linux:7::server |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-debuginfo-common-ppc64Red Hat:enterprise_linux:7::server |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-debuginfo-common-ppc64leRed Hat:enterprise_linux:7::server |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-debuginfo-common-s390xRed Hat:enterprise_linux:7::server |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:7::server |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-develRed Hat:enterprise_linux:7::server |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-docRed Hat:enterprise_linux:7::server |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-headersRed Hat:enterprise_linux:7::server |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-kdumpRed Hat:enterprise_linux:7::server |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-kdump-debuginfoRed Hat:enterprise_linux:7::server |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-kdump-develRed Hat:enterprise_linux:7::server |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-toolsRed Hat:enterprise_linux:7::server |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-tools-debuginfoRed Hat:enterprise_linux:7::server |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-tools-libsRed Hat:enterprise_linux:7::server |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
perfRed Hat:enterprise_linux:7::server |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
perf-debuginfoRed Hat:enterprise_linux:7::server |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
python-perfRed Hat:enterprise_linux:7::server |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
python-perf-debuginfoRed Hat:enterprise_linux:7::server |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-tools-libs-develRed Hat:enterprise_linux:7::server |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernelRed Hat:enterprise_linux:7::workstation |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-abi-whitelistsRed Hat:enterprise_linux:7::workstation |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-debugRed Hat:enterprise_linux:7::workstation |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-debug-debuginfoRed Hat:enterprise_linux:7::workstation |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-debug-develRed Hat:enterprise_linux:7::workstation |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-debuginfoRed Hat:enterprise_linux:7::workstation |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:7::workstation |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-develRed Hat:enterprise_linux:7::workstation |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-docRed Hat:enterprise_linux:7::workstation |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-headersRed Hat:enterprise_linux:7::workstation |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-toolsRed Hat:enterprise_linux:7::workstation |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-tools-debuginfoRed Hat:enterprise_linux:7::workstation |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-tools-libsRed Hat:enterprise_linux:7::workstation |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
perfRed Hat:enterprise_linux:7::workstation |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
perf-debuginfoRed Hat:enterprise_linux:7::workstation |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
python-perfRed Hat:enterprise_linux:7::workstation |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
python-perf-debuginfoRed Hat:enterprise_linux:7::workstation |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-tools-libs-develRed Hat:enterprise_linux:7::workstation |
before 0:3.10.0-514.26.1.el7 | 0:3.10.0-514.26.1.el7 |
kernel-rtRed Hat:rhel_extras_rt:7 |
before 0:3.10.0-514.26.1.rt56.442.el7 | 0:3.10.0-514.26.1.rt56.442.el7 |
kernel-rt-debugRed Hat:rhel_extras_rt:7 |
before 0:3.10.0-514.26.1.rt56.442.el7 | 0:3.10.0-514.26.1.rt56.442.el7 |
kernel-rt-debug-debuginfoRed Hat:rhel_extras_rt:7 |
before 0:3.10.0-514.26.1.rt56.442.el7 | 0:3.10.0-514.26.1.rt56.442.el7 |
kernel-rt-debug-develRed Hat:rhel_extras_rt:7 |
before 0:3.10.0-514.26.1.rt56.442.el7 | 0:3.10.0-514.26.1.rt56.442.el7 |
kernel-rt-debug-kvmRed Hat:rhel_extras_rt:7 |
before 0:3.10.0-514.26.1.rt56.442.el7 | 0:3.10.0-514.26.1.rt56.442.el7 |
kernel-rt-debug-kvm-debuginfoRed Hat:rhel_extras_rt:7 |
before 0:3.10.0-514.26.1.rt56.442.el7 | 0:3.10.0-514.26.1.rt56.442.el7 |
kernel-rt-debuginfoRed Hat:rhel_extras_rt:7 |
before 0:3.10.0-514.26.1.rt56.442.el7 | 0:3.10.0-514.26.1.rt56.442.el7 |
kernel-rt-debuginfo-common-x86_64Red Hat:rhel_extras_rt:7 |
before 0:3.10.0-514.26.1.rt56.442.el7 | 0:3.10.0-514.26.1.rt56.442.el7 |
kernel-rt-develRed Hat:rhel_extras_rt:7 |
before 0:3.10.0-514.26.1.rt56.442.el7 | 0:3.10.0-514.26.1.rt56.442.el7 |
kernel-rt-docRed Hat:rhel_extras_rt:7 |
before 0:3.10.0-514.26.1.rt56.442.el7 | 0:3.10.0-514.26.1.rt56.442.el7 |
kernel-rt-kvmRed Hat:rhel_extras_rt:7 |
before 0:3.10.0-514.26.1.rt56.442.el7 | 0:3.10.0-514.26.1.rt56.442.el7 |
kernel-rt-kvm-debuginfoRed Hat:rhel_extras_rt:7 |
before 0:3.10.0-514.26.1.rt56.442.el7 | 0:3.10.0-514.26.1.rt56.442.el7 |
kernel-rt-traceRed Hat:rhel_extras_rt:7 |
before 0:3.10.0-514.26.1.rt56.442.el7 | 0:3.10.0-514.26.1.rt56.442.el7 |
kernel-rt-trace-debuginfoRed Hat:rhel_extras_rt:7 |
before 0:3.10.0-514.26.1.rt56.442.el7 | 0:3.10.0-514.26.1.rt56.442.el7 |
kernel-rt-trace-develRed Hat:rhel_extras_rt:7 |
before 0:3.10.0-514.26.1.rt56.442.el7 | 0:3.10.0-514.26.1.rt56.442.el7 |
kernel-rt-trace-kvmRed Hat:rhel_extras_rt:7 |
before 0:3.10.0-514.26.1.rt56.442.el7 | 0:3.10.0-514.26.1.rt56.442.el7 |
kernel-rt-trace-kvm-debuginfoRed Hat:rhel_extras_rt:7 |
before 0:3.10.0-514.26.1.rt56.442.el7 | 0:3.10.0-514.26.1.rt56.442.el7 |
linux-hweUbuntu:16.04:LTS |
before 4.8.0-56.61~16.04.1, plus listed versions 4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1 Show 7 moreShow less4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.1 |
4.8.0-56.61~16.04.1 |
linux-azureUbuntu:18.04:LTS |
All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 39 moreShow less4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38 |
None known |
linux-gcpUbuntu:18.04:LTS |
All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 33 moreShow less4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35 |
None known |
linux-hweUbuntu:18.04:LTS |
All versions, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 38 moreShow less4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72 |
None known |
linux-azure-fdeUbuntu:20.04:LTS |
All versions, plus listed versions 5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1 Show 21 moreShow less5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1 |
None known |
linux-gkeUbuntu:20.04:LTS |
All versions, plus listed versions 5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41 Show 45 moreShow less5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111 |
None known |
linux-raspi2Ubuntu:20.04:LTS |
All versions, plus listed versions 5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6 |
None known |
linux-riscvUbuntu:20.04:LTS |
All versions, plus listed versions 5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34 Show 7 moreShow less5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45 |
None known |
linux-intel-iot-realtimeUbuntu:22.04:LTS |
All versions, plus listed versions 5.15.0-1073.75 |
None known |
linux-realtimeUbuntu:22.04:LTS |
All versions, plus listed versions 5.15.0-1032.35 |
None known |
linux-riscvUbuntu:22.04:LTS |
All versions, plus listed versions 5.13.0-1004.45.13.0-1006.6+22.04.15.13.0-1007.7+22.04.15.13.0-1010.11+22.04.15.15.0-1004.4 Show 18 moreShow less5.15.0-1005.55.15.0-1006.65.15.0-1007.75.15.0-1008.85.15.0-1011.125.15.0-1012.135.15.0-1014.165.15.0-1015.175.15.0-1016.185.15.0-1017.195.15.0-1018.215.15.0-1019.225.15.0-1020.235.15.0-1022.265.15.0-1023.275.15.0-1026.305.15.0-1027.315.15.0-1028.32 |
None known |
linux-raspi-realtimeUbuntu:24.04:LTS |
All versions, plus listed versions 6.8.0-2019.20 |
None known |
linux-hweUbuntu:16.04:LTS |
before 4.8.0-52.55~16.04.1, plus listed versions 4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1 Show 4 moreShow less4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.1 |
4.8.0-52.55~16.04.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2017-7477 is a high vulnerability (CVSS 7.0) in Linux Kernel, published April 25, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.39%, the 32nd percentile. Fixed in linux 4.9.25-1.
References
git.kernel.org/pub/scm/linux/kernel/git/davem/net.git/commit?id=4d6fa57b4dab0d77f4d8e9d9c73d1e63f6fe8fee
securitytracker.com/id/1038500
access.redhat.com/errata/RHSA-2017:1615
bugzilla.redhat.com/show_bug.cgi?id=1445207
Show 45 moreShow less
securityfocus.com/bid/98014
nvd.nist.gov/vuln/detail/CVE-2017-7477
github.com/advisories/GHSA-rj7x-xw78-6fjw
security-tracker.debian.org/tracker/CVE-2017-7477
security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1615.json
cve.org/CVERecord?id=CVE-2017-2583
qualys.com/2017/06/19/stack-clash/stack-clash.txt
ubuntu.com/security/CVE-2017-7477
openwall.com/lists/oss-security/2017/04/24/4
This page doesn't list everything
Left out here: 1 version. The JSON record has them.