PT-2015-7821 · Linux+3 · Linux Kernel+3

Wade Mealing

·

Publicado

2015-12-31

·

Atualizado

2022-01-31

·

CVE-2015-8785

CVSS v3.1

6.2

Média

VetorAV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.4
Description The issue allows local users to cause a denial of service, resulting in an infinite loop. This occurs when a writev system call is made, triggering a zero length for the first segment of an iov.
Recommendations For versions prior to 4.4, update to version 4.4 or later to resolve the issue.

Exploit

Correção

DoS

Infinite Loop

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-835

Identificadores relacionados

ALT-PU-2016-1018
ALT-PU-2016-1485
CVE-2015-8785
DLA-412-1
DSA-3503-1
OPENSUSE-SU-2016_1008-1
OPENSUSE-SU-2016_2144-1
SUSE-SU-2016:0585-1
SUSE-SU-2016:0785-1
SUSE-SU-2016:0911-1
SUSE-SU-2016:1102-1
SUSE-SU-2016:1203-1
SUSE-SU-2016:1764-1
SUSE-SU-2016:2074-1
USN-2886-1
USN-2886-2
USN-2907-1
USN-2907-2
USN-2908-1
USN-2908-2
USN-2908-3
USN-2909-1
USN-2909-2
USN-2910-1
USN-2910-2

Produtos afetados

Alt Linux
Linux Kernel
Suse
Ubuntu