PT-2015-7046 · Linux+3 · Linux Kernel+3
Adam Mariš
·
Publicado
2015-08-03
·
Atualizado
2020-06-02
·
CVE-2015-5707
CVSS v2.0
4.6
Média
| Vetor | AV:L/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions 2.6.x through 4.x before 4.1
Description
The issue is related to an integer overflow in the
sg start req function, which can be triggered by a large iov count value in a write request. This can cause a denial of service or possibly have other unspecified impacts. The estimated number of potentially affected devices is not provided.Recommendations
For Linux kernel versions 2.6.x through 4.x before 4.1, update to version 4.1 or later to resolve the issue.
At the moment, there is no other information about additional mitigation measures for this specific issue.
Exploit
Correção
DoS
Integer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Linux Kernel
Suse
Ubuntu