CVE-2017-7397

HIGH 7.5CVE-2017-7397 · Published 03/04/2017 · updated 17/06/2026

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

BackBox Linux 4.6 allows remote attackers to cause a denial of service (ksoftirqd CPU consumption) via a flood of packets with Martian source IP addresses (as defined in RFC 1812 section 5.3.7). This product enables net.ipv4.conf.all.log_martians by default. NOTE: the vendor reports "It has been proved that this vulnerability has no foundation and it is totally fake and based on false assumptions.

References

exploitalert.com/view-details.html · Exploit
backbox.org/portal/blog/false-cve-backbox-46-unmasked · Vendor Advisory
cxsecurity.com/issue/WLB-2017040001 · Exploit
forum.backbox.org/security-advisories/waiting-verification-backbox-os-denial-of-service/msg10218 · Vendor Advisory
exploit-db.com/exploits/41781 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free