PT-2015-6831 · Linux+5 · Linux Kernel+5

Adam Mariš

·

Publicado

2015-10-05

·

Atualizado

2023-02-13

·

CVE-2015-5283

CVSS v2.0

4.7

Média

VetorAV:L/AC:M/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.2.3
Description The issue is related to an incorrect sequence of protocol-initialization steps in the sctp init function, which can cause a denial of service, resulting in a panic or memory corruption. This can be triggered by local users creating SCTP sockets before the initialization steps have completed.
Recommendations For Linux kernel versions prior to 4.2.3, update to version 4.2.3 or later to resolve the issue. As a temporary workaround, consider restricting the creation of SCTP sockets until the initialization steps have finished.

Exploit

Correção

DoS

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

ALT-PU-2015-1834
ALT-PU-2016-1485
CESA-2015_2152
CVE-2015-5283
DSA-3372-1
OPENSUSE-SU-2015_1842-1
OPENSUSE-SU-2016_0301-1
RHSA-2015:2152
RHSA-2015:2411
RHSA-2015_2152
RHSA-2015_2411
SUSE-SU-2015:1727-1
SUSE-SU-2015:2194-1
USN-2797-1
USN-2823-1
USN-2826-1
USN-2829-1
USN-2829-2

Produtos afetados

Alt Linux
Centos
Linux Kernel
Red Hat
Suse
Ubuntu