Linux Kernel 4.14.67 Local Denial of Service Vulnerability

CVE-2018-17977 · MEDIUM Severity

AV:L/AC:L/AU:N/C:N/I:N/A:C

The Linux kernel 4.14.67 mishandles certain interaction among XFRM Netlink messages, IPPROTO_AH packets, and IPPROTO_IP packets, which allows local users to cause a denial of service (memory consumption and system hang) by leveraging root access to execute crafted applications, as demonstrated on CentOS 7.

Learn more about our Cis Benchmark Audit For Centos Linux.