Skip to content
brandefense.io
Request A Demo
Vulnerability Intelligence

CVE-2017-18017

Critical

The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service (use-after-free and memory corruption) or possibly have unspecified other impact by leveraging the…

Published Jan 3, 2018 · Updated Aug 26, 2026 · Also known as DEBIAN-CVE-2017-18017, UBUNTU-CVE-2017-18017

Key Facts

Patch immediately
  • CVE-2017-18017 is a critical-severity vulnerability (CVSS 9.8 v3.1) affecting Arx (F5), Cloud Magnum Orchestration (Openstack), Mrg Realtime (Redhat) and 22 more products.
  • It is not listed in any known-exploited vulnerabilities catalog. No public exploit code is known.
  • EPSS estimates a 53% probability of exploitation in the next 30 days.
  • Fixed versions are available, including cluster-md-kmp-default 4.4.114-92.64.1, cluster-md-kmp-default 4.4.114-94.11.3, cluster-md-kmp-rt 4.4.114-27.1.
  • Brandefense priority: patch immediately, because it is very likely to be exploited soon.

CVSS v3.1

9.8

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS (30-day exploit likelihood)

53%

Higher than 98.9% of all scored CVEs

Exploited in the wild

No known

Not in a known-exploited catalog

Public exploit code

None known

Get the full CVE-2017-18017 brief as a PDF

Every affected product and fixed release, exploitation status and a first 24 hours response checklist, emailed within minutes.

Description

The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service (use-after-free and memory corruption) or possibly have unspecified other impact by leveraging the presence of xt_TCPMSS in an iptables action.

Affected Products

552 affected entries in total
ProductAffected versionsFixed in
ArxF5See advisory6.4.0
Cloud Magnum OrchestrationOpenstack7n/a
Mrg RealtimeRedhat2.0n/a
Caas PlatformSuseSee advisoryn/a
Linux Enterprise DebuginfoSuse11-sp3, 11-sp4n/a
20 more affected products in the full CVE brief

Patched Releases

cluster-md-kmp-default

4.4.114-92.64.1, 4.4.114-94.11.3

cluster-md-kmp-rt

4.4.114-27.1, 4.4.120-3.8.1

cluster-network

1.4-2.32.4.6

cluster-network-kmp-bigmem

1.4_3.0.101_108.35-2.32.4.6

cluster-network-kmp-default

1.4_3.0.101_108.35-2.32.4.6, 4.4.114-92.64.1

cluster-network-kmp-pae

1.4_3.0.101_108.35-2.32.4.6

cluster-network-kmp-ppc64

1.4_3.0.101_108.35-2.32.4.6

cluster-network-kmp-rt

1.4_3.0.101_rt130_69.14-2.32.4.6, 4.4.114-27.1

cluster-network-kmp-rt_trace

1.4_3.0.101_rt130_69.14-2.32.4.6

cluster-network-kmp-trace

1.4_3.0.101_108.35-2.32.4.6

cluster-network-kmp-xen

1.4_3.0.101_108.35-2.32.4.6

dlm-kmp-default

4.4.114-92.64.1, 4.4.114-94.11.3

dlm-kmp-rt

4.4.114-27.1, 4.4.120-3.8.1

drbd

8.4.4-0.27.4.2

drbd-bash-completion

8.4.4-0.27.4.2

drbd-heartbeat

8.4.4-0.27.4.2

drbd-kmp

8.4.4-0.27.4.6

drbd-kmp-bigmem

8.4.4_3.0.101_108.35-0.27.4.6

drbd-kmp-default

8.4.4_3.0.101_108.35-0.27.4.6

drbd-kmp-pae

8.4.4_3.0.101_108.35-0.27.4.6

drbd-kmp-ppc64

8.4.4_3.0.101_108.35-0.27.4.6

drbd-kmp-rt

8.4.4_3.0.101_rt130_69.14-0.27.4.6

drbd-kmp-rt_trace

8.4.4_3.0.101_rt130_69.14-0.27.4.6

drbd-kmp-trace

8.4.4_3.0.101_108.35-0.27.4.6

drbd-kmp-xen

8.4.4_3.0.101_108.35-0.27.4.6

Timeline

  1. Publicly disclosed

    Jan 3, 2018

  2. Last updated

    Aug 26, 2026

Weakness Type

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
  • CWE-416 Use After Free

References

15 more references in the full CVE brief

FAQ

Common Questions.

Is CVE-2017-18017 Running On Your Attack Surface?

Brandefense maps vulnerabilities like this one to your internet-facing assets and tells you exactly where to patch.

Request A Demo