CVE-2017-18017: Arista Eos

Critical severity, CVSS 9.8. EPSS: 52.8% chance of exploitation in the next 30 days.

The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service (use-after-free and memory corruption) or possibly have unspecified other impact by leveraging the presence of xt_TCPMSS in an iptables action.

Affected products

  • Arista Eos: version 4.20.1fx-virtual-router only
  • Canonical Ubuntu Linux: version 12.04 only; version 14.04 only
  • Debian Debian Linux: version 7.0 only; version 8.0 only
  • F5 Arx: from 6.2.0, up to and including 6.4.0
  • Linux Linux Kernel: from 3.2, before 3.2.99 (fixed in 3.2.99); from 3.3, before 3.10.108 (fixed in 3.10.108); from 3.11, before 3.16.54 (fixed in 3.16.54); from 3.17, before 3.18.60 (fixed in 3.18.60); from 3.19, before 4.1.43 (fixed in 4.1.43); from 4.2, before 4.4.76 (fixed in 4.4.76); …
  • Openstack Cloud Magnum Orchestration: version 7 only
  • Opensuse Leap: version 42.3 only
  • Red Hat Enterprise Linux Desktop: version 6.0 only; version 7.0 only
  • Red Hat Enterprise Linux Eus: version 7.3 only; version 7.4 only; version 7.6 only; version 7.7 only
  • Red Hat Enterprise Linux For Real Time: version 7 only
  • Red Hat Enterprise Linux For Real Time For Nfv: version 7 only
  • Red Hat Enterprise Linux Server: version 6.0 only; version 7.0 only
  • Red Hat Enterprise Linux Server Aus: version 7.3 only; version 7.4 only; version 7.6 only; version 7.7 only
  • Red Hat Enterprise Linux Server Tus: version 7.3 only; version 7.4 only; version 7.6 only; version 7.7 only
  • Red Hat Enterprise Linux Workstation: version 6.0 only; version 7.0 only
  • Red Hat Mrg Realtime: version 2.0 only
  • Suse Caas Platform: any version
  • Suse Linux Enterprise Debuginfo: version 11 only
  • Suse Linux Enterprise Desktop: version 12 only
  • Suse Linux Enterprise High Availability: version 12 only
  • Suse Linux Enterprise High Availability Extension: version 11 only
  • Suse Linux Enterprise Live Patching: version 12 only
  • Suse Linux Enterprise Module For Public Cloud: version 12 only
  • Suse Linux Enterprise Point Of Sale: version 11 only
  • Suse Linux Enterprise Real Time Extension: version 11 only; version 12 only
  • and 4 more

Published 2018-01-03. Last modified 2026-06-17.