CVE-2017-6074
The dccp_rcv_state_process function in net/dccp/input.c in the Linux kernel through 4.9.11 mishandles DCCP_PKT_REQUEST packet data structures in the LISTEN state, which allows local users to obtain root privileges or cause a denial of service (double…
Does this matter?
2 public exploits are published in Exploit-DB and the impact is high, while EPSS rates exploitation at 6.0%. Anyone can run this; patch or mitigate before the next change window and check exposed instances for signs of use.
Description
The dccp_rcv_state_process function in net/dccp/input.c in the Linux kernel through 4.9.11 mishandles DCCP_PKT_REQUEST packet data structures in the LISTEN state, which allows local users to obtain root privileges or cause a denial of service (double free) via an application that makes an IPV6_RECVPKTINFO setsockopt system call.
- CVSS 3.1
- 7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 5.96% probability · 93th percentile
- Public exploits
- 2 in Exploit-DB · first 26 February 2017
- CISA KEV
- Not listed
- Weakness
- CWE-415
- Affected
- linux/linux kernel · debian/debian linux
- Source
- cve@mitre.org
EPSS 6.0% since 27 October 2026; no change recorded yet. The dashed line is the ten per cent mark our analysts treat as “patch before the next change window”. Points are recorded when the score first appears and whenever it moves by a percentage point or more.
Public exploits (2)
Entries in Exploit-DB that cite this CVE. Links go to the Exploit-DB page and to the file in the public repository; nothing is hosted here. A verified tick means the Exploit-DB team confirmed the exploit works against the stated version.
References
- http://rhn.redhat.com/errata/RHSA-2017-0293.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0294.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0295.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0316.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0323.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0324.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0345.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0346.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0347.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0365.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0366.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0403.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0501.htmlThird Party Advisory
- http://www.debian.org/security/2017/dsa-3791Third Party Advisory
- http://www.openwall.com/lists/oss-security/2017/02/22/3Mailing List, Third Party Advisory
- http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.htmlPatch, Third Party Advisory
- http://www.securityfocus.com/bid/96310Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1037876Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHSA-2017:0932Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:1209Third Party Advisory
- https://github.com/torvalds/linux/commit/5edabca9d4cff7f1f2b68f0bac55ef99d9798ba4Issue Tracking, Patch, Third Party Advisory
- https://source.android.com/security/bulletin/2017-07-01Third Party Advisory
- https://www.exploit-db.com/exploits/41457/Third Party Advisory, VDB Entry
- https://www.exploit-db.com/exploits/41458/Third Party Advisory, VDB Entry
- https://www.tenable.com/security/tns-2017-07Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0293.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0294.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0295.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0316.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0323.htmlThird Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.