PT-2016-3476 · Linux+5 · Linux Kernel+5

Socketpair

+1

·

Publicado

2016-01-13

·

Atualizado

2023-02-13

·

CVE-2013-4312

CVSS v3.1

6.2

Média

VetorAV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.4.1
Description The issue allows local users to bypass file-descriptor limits and cause a denial of service (memory consumption) by sending each descriptor over a UNIX socket before closing it, related to net/unix/af unix.c and net/unix/garbage.c.
Recommendations For Linux kernel versions prior to 4.4.1, update to version 4.4.1 or later to resolve the issue.

Exploit

Correção

DoS

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

ALT-PU-2016-1018
ALT-PU-2016-1485
CESA-2016_0855
CESA-2016_2574
CVE-2013-4312
DSA-3448-1
DSA-3503-1
MGASA-2016-0225
MGASA-2016-0232
MGASA-2016-0233
RHSA-2016:0855
RHSA-2016:2574
RHSA-2016:2584
RHSA-2016_0855
RHSA-2016_2574
RHSA-2016_2584
SUSE-SU-2016:2245-1
SUSE-SU-2016:2976-1
SUSE-SU-2016:3069-1
SUSE-SU-2016_2245-1
SUSE-SU-2016_2976-1
SUSE-SU-2017:0333-1
USN-2908-1
USN-2908-2
USN-2908-3
USN-2929-1
USN-2929-2
USN-2931-1
USN-2932-1
USN-2967-1
USN-2967-2

Produtos afetados

Alt Linux
Centos
Linux Kernel
Red Hat
Suse
Ubuntu