BackBox Linux 4.6 allows remote attackers to cause a denial...
Vulnerability Description
BackBox Linux 4.6 allows remote attackers to cause a denial of service (ksoftirqd CPU consumption) via a flood of packets with Martian source IP addresses (as defined in RFC 1812 section 5.3.7). This product enables net.ipv4.conf.all.log_martians by default. NOTE: the vendor reports "It has been proved that this vulnerability has no foundation and it is totally fake and based on false assumptions.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-7397
Credits & Attribution
No credits recorded in the NVD database.
References
- http://www.exploitalert.com/view-details.html?id=26361
- https://backbox.org/portal/blog/false-cve-backbox-46-unmasked
- https://cxsecurity.com/issue/WLB-2017040001
- https://forum.backbox.org/security-advisories/waiting-verification-backbox-os-denial-of-service/msg10218
- https://www.exploit-db.com/exploits/41781/
Affected Vendor
backbox
View all reports →Affected Software
Timeline
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.