CVE:CVE-2017-18017
CNNVD:CNNVD-201801-145
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。
Linux kernel 4.11之前版本和4.9.36之前4.9.x版本中的net/netfilter/xt_TCPMSS.c文件的‘tcpmss_mangle_packet’函数存在资源管理错误漏洞。远程攻击者可利用该漏洞造成拒绝服务（释放后重用和内存损坏）。
solution:Upgrade linux linux_kernel to a higher version than 3.2.99,3.10.108,3.16.54,3.18.60,4.1.43,4.4.76,4.9.36,4.11,and avoid the version [3.2,3.2.99),[3.3,3.10.108),[3.11,3.16.54),[3.17,3.18.60),[3.19,4.1.43),[4.2,4.4.76),[4.5,4.9.36),[4.10,4.11); Upgrade debian debian_linux to a higher version than 7.0,8.0,and avoid the version 7.0,8.0; Upgrade arista eos to a higher version than *; Upgrade f5 arx to a higher version than 6.4.0,and avoid the version [6.2.0,6.4.0]; Upgrade suse caas_platform to a higher version than *; Upgrade suse linux_enterprise_debuginfo to a higher version than 11:sp3,11:sp4,and avoid the version 11:sp3,11:sp4; Upgrade suse linux_enterprise_module_for_public_cloud to a higher version than 12,and avoid the version 12; Upgrade suse linux_enterprise_point_of_sale to a higher version than 11:sp3,and avoid the version 11:sp3; Upgrade suse openstack_cloud to a higher version than 6,and avoid the version 6; Upgrade opensuse leap to a higher version than 42.3,and avoid the version 42.3; Upgrade suse linux_enterprise_desktop to a higher version than 12:sp2,12:sp3,and avoid the version 12:sp2,12:sp3; Upgrade suse linux_enterprise_high_availability to a higher version than 12:sp2,12:sp3,and avoid the version 12:sp2,12:sp3; Upgrade suse linux_enterprise_high_availability_extension to a higher version than 11:sp4,and avoid the version 11:sp4; Upgrade suse linux_enterprise_live_patching to a higher version than 12,12:sp3,and avoid the version 12,12:sp3; Upgrade suse linux_enterprise_real_time_extension to a higher version than 11:sp4,12:sp2,12:sp3,and avoid the version 11:sp4,12:sp2,12:sp3; Upgrade suse linux_enterprise_server to a higher version than 11:sp3,11:sp4,12,12:sp1,12:sp2,12:sp3,and avoid the version 11:sp3,11:sp4,12,12:sp1,12:sp2,12:sp3; Upgrade suse linux_enterprise_software_development_kit to a higher version than 11:sp4,12:sp2,12:sp3,and avoid the version 11:sp4,12:sp2,12:sp3; Upgrade suse linux_enterprise_workstation_extension to a higher version than 12:sp2,12:sp3,and avoid the version 12:sp2,12:sp3; Upgrade openstack cloud_magnum_orchestration to a higher version than 7,and avoid the version 7; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,and avoid the version 12.04,14.04; Upgrade redhat mrg_realtime to a higher version than 2.0,and avoid the version 2.0; Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_eus to a higher version than 7.3,7.4,7.6,7.7,and avoid the version 7.3,7.4,7.6,7.7; Upgrade redhat enterprise_linux_for_real_time to a higher version than 7,and avoid the version 7; Upgrade redhat enterprise_linux_for_real_time_for_nfv to a higher version than 7,and avoid the version 7; Upgrade redhat enterprise_linux_server to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.3,7.4,7.6,7.7,and avoid the version 7.3,7.4,7.6,7.7; Upgrade redhat enterprise_linux_server_tus to a higher version than 7.3,7.4,7.6,7.7,and avoid the version 7.3,7.4,7.6,7.7; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,7.0,and avoid the version 6.0,7.0