PT-2015-7694 · Linux+3 · Linux Kernel+3
Andreas Stieger
·
Publicado
2015-11-10
·
Atualizado
2018-10-17
·
CVE-2015-7990
CVSS v2.0
5.9
Média
| Vetor | AV:L/AC:M/Au:N/C:P/I:P/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 4.3.3
Description
A race condition exists in the
rds sendmsg function, allowing local users to cause a denial of service, potentially resulting in a system crash, by utilizing a socket that was not properly bound. This issue is a result of an incomplete fix for a previous problem.Recommendations
For Linux kernel versions prior to 4.3.3, update to version 4.3.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the
rds sendmsg function to minimize the risk of exploitation.Exploit
Correção
DoS
Race Condition
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Linux Kernel
Suse
Ubuntu