CVE-2017-18017

CRITICAL

The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service (use-after-free and mem...

Affects 30 products across 9 vendors.

CVSS 3.19.8
EPSS52.8%
Percentile99th
PatchUnknown
CVSS Vector — Plain English Remotely exploitable over the network, low complexity, no authentication required, no user interaction needed, impact contained to the vulnerable component, full confidentiality impact, full integrity impact, full availability impact.
CWE Weakness Definitions
CWE-416: Use After Free

Software references memory after it has been freed, leading to corruption, crashes, or code execution.

◆ AI Analysis — automated analysis, not human-reviewed

This vulnerability was disclosed in 2018. A critical vulnerability affects Arista systems (CVE-2017-18017). No public exploit code is currently available. Isolate affected systems if patching is not feasible.

BSID: BS-2018-GLOBAL-228426-C • Model: rule-based-v1 • Confidence: MEDIUM

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2017-18017?
This vulnerability was disclosed in 2018. A critical vulnerability affects Arista systems (CVE-2017-18017). No public exploit code is currently available. Isolate affected systems if patching is not feasible.
What is the CVSS score for CVE-2017-18017?
CVE-2017-18017 has CVSS 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS: 52.8%.
Is CVE-2017-18017 actively exploited?
No confirmed active exploitation of CVE-2017-18017 as of 2026-09-25.
How do I remediate CVE-2017-18017?
Priority: MEDIUM. PSIRT: [email protected]
What systems are affected by CVE-2017-18017?
CVE-2017-18017 affects Arista Eos; Canonical Ubuntu Linux; Debian Debian Linux; F5 Arx; Linux Linux Kernel; Openstack Cloud Magnum Orchestration; Opensuse Leap; Redhat Enterprise Linux For Real Time, Enterprise Linux For Real Time For Nfv, Enterprise Linux Workstation (plus 19 more products across 1 more vendor).
Vulnerability Details
CVE IDCVE-2017-18017
BSIDBS-2018-GLOBAL-228426-C BreachSpider Global ID
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Published2018-01-03
Last Modified2026-06-17
ICS Relevance0%
Weakness (CWE)
Use After Free
Domains
NETWORK-INFRA
SourceNVD
Official Description

The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service (use-after-free and memory corruption) or possibly have unspecified other impact by leveraging the presence of xt_TCPMSS in an iptables action.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

Vulnerability details: The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service (use-after-free and memory corruption) or possibly have unspecified other impact by leveraging the presence of xt_TCPMSS in an iptables action. CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Exploitation Likelihood: LOW

Affected Products
VendorProductAffected Versions
Arista Eos 4.20.1fx-virtual-router
Canonical Ubuntu Linux 12.04 14.04
Debian Debian Linux 7.0 8.0
F5 Arx (device & firmware) ≥ 6.2.0, ≤ 6.4.0
Linux Linux Kernel ≥ 3.2, < 3.2.99 ≥ 3.3, < 3.10.108 ≥ 3.11, < 3.16.54 ≥ 3.17, < 3.18.60 ≥ 3.19, < 4.1.43 ≥ 4.2, < 4.4.76
+2 more≥ 4.5, < 4.9.36 ≥ 4.10, < 4.11
Openstack Cloud Magnum Orchestration 7
Opensuse Leap 42.3
Redhat Enterprise Linux For Real Time 7
Redhat Enterprise Linux For Real Time For Nfv 7
Redhat Enterprise Linux Workstation 6.0 7.0
Redhat Enterprise Linux Eus 7.3 7.4 7.6 7.7
Redhat Enterprise Linux Server Aus 7.3 7.4 7.6 7.7
Redhat Mrg Realtime 2.0
Redhat Enterprise Linux Server Tus 7.3 7.4 7.6 7.7
Redhat Enterprise Linux Server 6.0 7.0
Redhat Enterprise Linux Desktop 6.0 7.0
Suse Linux Enterprise Workstation Extension 12
Suse Openstack Cloud 6
Suse Linux Enterprise Live Patching 12
Suse Linux Enterprise Module For Public Cloud 12
Suse Linux Enterprise High Availability 12
Suse Linux Enterprise Point Of Sale 11
Suse Caas Platform All versions
Suse Linux Enterprise Software Development Kit 11 12
Suse Linux Enterprise Real Time Extension 11 12
Suse Linux Enterprise Desktop 12
Suse Linux Enterprise Server 11 12
Suse Linux Enterprise Debuginfo 11
Suse Linux Enterprise High Availability Extension 11
Remediation

No official vendor advisory link on record. See the CVE record →

Vendor PSIRT: [email protected]
Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 3208 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Modelrule-based-v1
ConfidenceMEDIUM
Enriched At2026-05-24
SHA-512 Audit Hashc60e1d41cecc729349c866a26e3cd469f23b9f6e892a0f6fce85b3e5c6a8d800f2bd90ef2eb38e96a742c4b93c72d7256246747a6b1fd4c84af145354011bdb7
Related CVEs affecting Arista
CVE-2024-11186 10.0 On affected versions of the CloudVision Portal, improper access controls coul... CVE-2026-16812 10.0 VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue ma... CVE-2025-0505 10.0 On Arista CloudVision systems (virtual or physical on-premise deployments), Z... CVE-2015-8236 10.0 Arista EOS before 4.11.12, 4.12 before 4.12.11, 4.13 before 4.13.14M, 4.14 be... CVE-2026-93952 10.0 VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue ma...
View all Arista CVEs →

Critical Severity - Know Your Exposure

A CVSS 9.8 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.

Create a free account →