PT-2016-3602 · Linux+1 · Linux Kernel+1

Vasyl Kaigorodov · Publicado 2015-03-27 · Atualizado 2016-06-27 · CVE-2015-2686

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions 3.19 through 3.19.2

Description The issue concerns the Linux kernel, where the net/socket.c file does not properly validate certain range data for the sendto and recvfrom system calls. This can be exploited by local users to gain privileges, particularly in subsystems that utilize the copy from iter function within the iov iter interface, such as the Bluetooth subsystem.

Recommendations For Linux kernel versions 3.19 through 3.19.2, update to version 3.19.3 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

ALT-PU-2015-1326

CVE-2015-2686

Produtos afetados

Alt Linux

Linux Kernel

Referências · 15

• https://github.com/torvalds/linux/commit/4de930efc23b92ddf88ce91c405ee645fe6e27ea · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-2686 · Nota de Segurança
• http://twitter.com/grsecurity/statuses/579050211605102592 · Nota
• https://cve.org/CVERecord?id=CVE-2015-2686 · Nota de Segurança
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-2686 · Aviso do Fabricante
• http://kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.19.3 · Nota
• http://grsecurity.net/~spender/viro.txt · Nota
• https://bugzilla.redhat.com/show_bug.cgi?id=1205242 · Nota
• http://twitter.com/grsecurity/statuses/579075689439059968 · Nota
• http://securityfocus.com/bid/73286 · Nota
• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4de930efc23b92ddf88ce91c405ee645fe6e27ea · Nota
• https://linux.oracle.com/errata/ELSA-2017-3597.html · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2015-2686 · Aviso do Fabricante
• http://twitter.com/grsecurity/statuses/579060953477701632 · Nota
• http://openwall.com/lists/oss-security/2015/03/23/14 · Nota