PT-2015-6872 · Linux+5 · Linux Kernel+5

Martin Prpič

·

Publicado

2015-06-23

·

Atualizado

2018-01-05

·

CVE-2015-5366

CVSS v2.0

5.0

Média

VetorAV:N/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.0.6
Description The issue allows remote attackers to cause a denial of service, specifically an EPOLLET epoll application read outage, via an incorrect checksum in a UDP packet. This is achieved through the udp recvmsg and udpv6 recvmsg functions in the Linux kernel.
Recommendations For Linux kernel versions prior to 4.0.6, update to version 4.0.6 or later to resolve the issue.

Exploit

Correção

DoS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

ALT-PU-2015-1564
ALT-PU-2015-1849
CESA-2015_1623
CESA-2015_1778
CVE-2015-5366
DLA-310-1
DSA-3313-1
DSA-3329-1
OPENSUSE-SU-2015_1382-1
OPENSUSE-SU-2016_0301-1
RHSA-2015:1623
RHSA-2015:1778
RHSA-2015:1787
RHSA-2015:1788
RHSA-2015_1623
RHSA-2015_1778
RHSA-2015_1788
RHSA-2016:0045
RHSA-2016:1096
RHSA-2016:1100
RHSA-2016:1225
RHSA-2016_0045
SUSE-SU-2015:1224-1
SUSE-SU-2015:1324-1
SUSE-SU-2015:1478-1
SUSE-SU-2015:1487-1
SUSE-SU-2015:1488-1
SUSE-SU-2015:1489-1
SUSE-SU-2015:1490-1
SUSE-SU-2015:1491-1
SUSE-SU-2015:1592-1
SUSE-SU-2015:1611-1
SUSE-SU-2015:1678-1
SUSE-SU-2015:2167-1
USN-2680-1
USN-2681-1
USN-2682-1
USN-2683-1
USN-2684-1
USN-2685-1
USN-2713-1
USN-2714-1

Produtos afetados

Alt Linux
Centos
Linux Kernel
Red Hat
Suse
Ubuntu