PT-2016-3923 · Linux+5 · Linux Kernel+5

Dmitry Vyukov

·

Publicado

2016-01-13

·

Atualizado

2024-06-15

·

CVE-2015-8539

CVSS v3.1

7.8

Alta

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.4
Description The issue allows local users to gain privileges or cause a denial of service via crafted keyctl commands. This is related to the security/keys/encrypted-keys/encrypted.c, security/keys/trusted.c, and security/keys/user defined.c files.
Recommendations For Linux kernel versions prior to 4.4, update to version 4.4 or later to resolve the issue.

Exploit

Correção

DoS

Improper Privilege Management

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-269

Identificadores relacionados

ALT-PU-2016-1018
ALT-PU-2016-1485
CESA-2018_0151
CVE-2015-8539
OPENSUSE-SU-2016_0280-1
OPENSUSE-SU-2024:10128-1
RHSA-2018:0151
RHSA-2018:0152
RHSA-2018:0181
RHSA-2018_0151
RHSA-2018_0152
SUSE-SU-2016:0168-1
SUSE-SU-2016:0335-1
SUSE-SU-2016:0336-1
SUSE-SU-2016:0337-1
SUSE-SU-2016:0339-1
SUSE-SU-2016:0380-1
SUSE-SU-2016:0381-1
SUSE-SU-2016:0383-1
SUSE-SU-2016:0384-1
SUSE-SU-2016:0386-1
SUSE-SU-2016:0387-1
SUSE-SU-2016:0434-1
SUSE-SU-2016:0585-1
SUSE-SU-2016:0911-1
SUSE-SU-2016:1102-1
SUSE-SU-2016:1203-1
SUSE-SU-2016:1937-1
SUSE-SU-2016:2074-1
USN-3798-1
USN-3798-2

Produtos afetados

Alt Linux
Centos
Linux Kernel
Red Hat
Suse
Ubuntu