vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2017-7487

HIGH
7.8
CVSS Score
Published: May 14, 2017 at 10:00 PM UTC
Updated: June 17, 2026 at 01:24 AM UTC
3 products affected across 3 vendorsLinux KernelDebian LinuxKernel

Using Linux kernel through 4.11.1 by N/A?

Get instant alerts when new vulnerabilities affect Linux kernel through 4.11.1 - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
HIGH7.8
Exploit prediction
EPSS 0.4%

Description

The ipxitf_ioctl function in net/ipx/af_ipx.c in the Linux kernel through 4.11.1 mishandles reference counts, which allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via a failed SIOCGIFADDR ioctl call for an IPX interface.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Debian Linux· Debiandrupal
95%
8.09.0
Linux Kernel· Linux
95%
v < 3.2.893.17 ≤ v < 3.18.553.19 ≤ v < 4.1.413.3 ≤ v < 3.16.444.10 ≤ v < 4.11.34.2 ≤ v < 4.4.704.5 ≤ v < 4.9.30
Affected range stops below 3.16.44, so it looks safe — our inference, not a vendor statement
Affected range stops below 3.18.55, so it looks safe — our inference, not a vendor statement
Affected range stops below 3.2.89, so it looks safe — our inference, not a vendor statement
Affected range stops below 4.1.41, so it looks safe — our inference, not a vendor statement
Affected range stops below 4.11.3, so it looks safe — our inference, not a vendor statement
Affected range stops below 4.4.70, so it looks safe — our inference, not a vendor statement
Affected range stops below 4.9.30, so it looks safe — our inference, not a vendor statement
Kernel· Red Hat
60%
All versions

References (8)

x_refsource_CONFIRMPatch
Source: [email protected]
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ee0d8d8482345ff97a75a7d747efc309f13b0d80
Vendor Advisoryx_refsource_DEBIANThird Party Advisory
Source: [email protected]
http://www.debian.org/security/2017/dsa-3886
VDB Entryx_refsource_BIDThird Party Advisory
Source: [email protected]
http://www.securityfocus.com/bid/98439
VDB Entryx_refsource_SECTRACKThird Party Advisory
Source: [email protected]
http://www.securitytracker.com/id/1039237
x_refsource_CONFIRMIssue TrackingPatch
Source: [email protected]
https://bugzilla.redhat.com/show_bug.cgi?id=1447734
x_refsource_CONFIRMIssue TrackingPatchVendor Advisory
Source: [email protected]
https://github.com/torvalds/linux/commit/ee0d8d8482345ff97a75a7d747efc309f13b0d80
x_refsource_CONFIRMPatch
Source: [email protected]
https://patchwork.ozlabs.org/patch/757549/
x_refsource_CONFIRMThird Party Advisory
Source: [email protected]
https://source.android.com/security/bulletin/2017-09-01

CVSS

7.8HIGH[email protected]
Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-416

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card