PT-2015-3272 · Linux+5 · Linux Kernel+5
Dmitry Vyukov
·
Publicado
2015-12-02
·
Atualizado
2024-04-02
·
CVE-2016-3841
CVSS v3.1
7.3
Alta
| Vetor | AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 4.3.3
Description
The issue is related to the IPv6 stack in the Linux kernel, which mishandles options data. This can be exploited by local users to gain privileges or cause a denial of service, resulting in a system crash due to a use-after-free error. The exploitation can occur via a crafted sendmsg system call.
Recommendations
For Linux kernel versions prior to 4.3.3, update to version 4.3.3 or later to resolve the issue.
As a temporary workaround, consider restricting access to the sendmsg system call to minimize the risk of exploitation.
Correção
DoS
Use After Free
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Centos
Linux Kernel
Red Hat
Suse
Ubuntu