CVE-2017-7397 : BackBox Linux 4.6 allows remote attackers to cause a denial of service (ksoftirq

BackBox Linux 4.6 allows remote attackers to cause a denial of service (ksoftirqd CPU consumption) via a flood of packets with Martian source IP addresses (as defined in RFC 1812 section 5.3.7). This product enables net.ipv4.conf.all.log_martians by default. NOTE: the vendor reports "It has been proved that this vulnerability has no foundation and it is totally fake and based on false assumptions.

Published 2017-04-03 20:59:00

Updated 2024-08-05 16:15:30

Source MITRE

View at NVD, CVE.org

Vulnerability category: Denial of service

Products affected by CVE-2017-7397

Backbox » Backbox Linux » Version: 4.6
cpe:2.3:o:backbox:backbox_linux:4.6:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2017-7397

EPSS FAQ

21.80%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 95 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2017-7397

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
5.0	MEDIUM	AV:N/AC:L/Au:N/C:N/I:N/A:P	10.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Partial
7.5	HIGH	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	3.9	3.6	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High

CWE ids for CVE-2017-7397

CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2017-7397

http://www.exploitalert.com/view-details.html?id=26361

BackBox OS Denial Of Service(CPU Consumption) - Exploitalert
Exploit;Third Party Advisory
https://www.exploit-db.com/exploits/41781/

BackBox OS - Denial of Service
Exploit;Third Party Advisory;VDB Entry
https://backbox.org/portal/blog/false-cve-backbox-46-unmasked

False CVE on BackBox 4.6 unmasked - BackBox.org Blog
Vendor Advisory
https://cxsecurity.com/issue/WLB-2017040001

BackBox OS Denial Of Service(CPU Consumption) - CXSecurity.com
Exploit;Third Party Advisory
https://forum.backbox.org/security-advisories/waiting-verification-backbox-os-denial-of-service/msg10218

Waiting verification - BackBox OS - Denial of Service - Security Advisories - BackBox.org Forum
Vendor Advisory

Jump to

Vulnerability Details : CVE-2017-7397

Products affected by CVE-2017-7397

Exploit prediction scoring system (EPSS) score for CVE-2017-7397

CVSS scores for CVE-2017-7397

CWE ids for CVE-2017-7397

References for CVE-2017-7397