PT-2015-7556 · Linux+3 · Linux Kernel+3

Alexander Bergmann · Publicado 2015-12-22 · Atualizado 2023-02-13 · CVE-2015-7509

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Média

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.7

Description The issue allows physically proximate attackers to cause a denial of service, resulting in a system crash, by utilizing a crafted no-journal filesystem.

Recommendations For Linux kernel versions prior to 3.7, update to version 3.7 or later to resolve the issue.

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CESA-2016_0855

CVE-2015-7509

RHSA-2016:0855

RHSA-2016_0855

SUSE-SU-2015:2339-1

SUSE-SU-2015:2350-1

SUSE-SU-2016:1203-1

SUSE-SU-2016:2074-1

Produtos afetados

Centos

Linux Kernel

Red Hat

Suse

Referências · 239

• https://github.com/torvalds/linux/commit/c9b92530a723ac5ef8e352885a1862b18f31b2f5 · Aviso do Fabricante
• https://bugzilla.suse.com/970504 · Nota
• https://bugzilla.suse.com/949936 · Nota
• https://bugzilla.suse.com/947957 · Nota
• https://bugzilla.suse.com/959705 · Nota
• https://linux.oracle.com/errata/ELSA-2016-0855.html · Aviso do Fabricante
• https://bugzilla.suse.com/956708 · Nota
• https://bugzilla.suse.com/955654 · Nota
• https://bugzilla.suse.com/945691 · Nota
• https://git.kernel.org/linus/0e9a9a1ad619e7e987815d20262d36a2f95717ca · Nota
• https://bugzilla.suse.com/952084 · Nota
• https://bugzilla.suse.com/939207 · Nota
• https://suse.com/security/cve/CVE-2015-8215 · Nota
• https://suse.com/security/cve/CVE-2015-8767 · Nota
• https://bugzilla.suse.com/967973 · Nota