Back to Database
Status published
High
CVE-2017-8824
The dccp_disconnect function in net/dccp/proto.c in the Linux kernel through...
Vulnerability Description
The dccp_disconnect function in net/dccp/proto.c in the Linux kernel through 4.14.3 allows local users to gain privileges or cause a denial of service (use-after-free) via an AF_UNSPEC connect system call during the DCCP_LISTEN state.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-8824
Credits & Attribution
No credits recorded in the NVD database.
References
- https://www.debian.org/security/2018/dsa-4082
- https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html
- https://usn.ubuntu.com/3583-2/
- http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html
- https://usn.ubuntu.com/3582-1/
- https://access.redhat.com/errata/RHSA-2018:1062
- https://access.redhat.com/errata/RHSA-2018:1319
- https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0
- https://usn.ubuntu.com/3583-1/
- https://access.redhat.com/errata/RHSA-2018:0676
- https://access.redhat.com/errata/RHSA-2018:1216
- https://www.exploit-db.com/exploits/43234/
- http://www.securityfocus.com/bid/102056
- https://usn.ubuntu.com/3581-1/
- https://usn.ubuntu.com/3581-3/
- https://access.redhat.com/errata/RHSA-2018:1170
- https://usn.ubuntu.com/3581-2/
- https://access.redhat.com/errata/RHSA-2018:1130
- https://access.redhat.com/errata/RHSA-2018:0399
- https://www.debian.org/security/2017/dsa-4073
- https://access.redhat.com/errata/RHSA-2018:3822
- http://lists.openwall.net/netdev/2017/12/04/224
- https://usn.ubuntu.com/3582-2/
- http://www.openwall.com/lists/oss-security/2017/12/05/1
More from n/a
View All →CVE-2025-9910
Versions of the package jsondiffpatch before 0.7.2 are vulnerable to...
Low
2.3
CVE-2025-9802
RemoteClinic profile.php sql injection
Medium
5.1
CVE-2025-9799
Langfuse Webhook promptRouter.ts promptChangeEventSourcing server-side request forgery
Low
2.3
CVE-2025-9775
RemoteClinic edit-my-profile.php unrestricted upload
Medium
6.9
CVE-2025-9774
RemoteClinic edit-patient.php information disclosure
Medium
5.3
Affected Vendor
Affected Software
Linux kernel through 4.14.3
Vulnerable Versions:
Linux kernel through 4.14.3
Timeline
Official Publish:
December 5th, 2017
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.