PT-2015-7139 · Linux+3 · Linux Kernel+3

Michael S. Tsirkin

·

Publicado

2015-08-12

·

Atualizado

2017-11-04

·

CVE-2015-6252

CVSS v2.0

2.1

Baixa

VetorAV:L/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.1.5
Description The issue allows local users to cause a denial of service, specifically memory consumption, by making a VHOST SET LOG FD ioctl call that triggers permanent file-descriptor allocation. This occurs due to a problem in the vhost dev ioctl function in drivers/vhost/vhost.c.
Recommendations For Linux kernel versions prior to 4.1.5, update to version 4.1.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the vhost dev ioctl function to minimize the risk of exploitation.

Exploit

Correção

DoS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

ALT-PU-2015-1678
ALT-PU-2015-1849
CVE-2015-6252
DSA-3364-1
SUSE-SU-2015:1678-1
SUSE-SU-2015:1727-1
SUSE-SU-2015:2108-1
SUSE-SU-2015:2167-1
SUSE-SU-2016:0354-1
SUSE-SU-2016:2074-1
USN-2748-1
USN-2749-1
USN-2751-1
USN-2752-1
USN-2759-1
USN-2760-1
USN-2777-1

Produtos afetados

Alt Linux
Linux Kernel
Suse
Ubuntu