CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 4.4. It affects Linux. It may lead to a denial-of-service condition.
CVE
CVE-2018-17977
Severity
MEDIUM
CVSS
4.4
EPSS
0.38%
Linux
Original NVD Description
The Linux kernel 4.14.67 mishandles certain interaction among XFRM Netlink messages, IPPROTO_AH packets, and IPPROTO_IP packets, which allows local users to cause a denial of service (memory consumption and system hang) by leveraging root access to execute crafted applications, as demonstrated on CentOS 7.
Related CVEs
Other vulnerabilities affecting the same vendor(s)