← back
CVE-2017-7397

CVE-2017-7397

EPSS 11.1%
BackBox Linux 4.6 allows remote attackers to cause a denial of service (ksoftirqd CPU consumption) via a flood of packets with Martian source IP addresses (as defined in RFC 1812 section 5.3.7). This product enables net.ipv4.conf.all.log_martians by default. NOTE: the vendor reports "It has been proved that this vulnerability has no foundation and it is totally fake and based on false assumptions.
Affected products
n/a · n/a
public PoCs found — 2
cve_referencewww.exploit-db.com/exploits/41781/unverifiedexploitdbwww.exploit-db.com/exploits/41781unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://backbox.org/portal/blog/false-cve-backbox-46-unmaskedhttps://cxsecurity.com/issue/WLB-2017040001https://forum.backbox.org/security-advisories/waiting-verification-backbox-os-denial-of-service/msg10218https://www.exploit-db.com/exploits/41781/http://www.exploitalert.com/view-details.html?id=26361