PT-2016-3994 · Linux+3 · Linux Kernel+3

Vladis Dronov · Publicado 2015-10-06 · Atualizado 2018-01-05 · CVE-2015-8746

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.2.2

Description The issue is related to the NFS client in the Linux kernel, where memory for migration recovery operations is not properly initialized. This allows remote NFS servers to cause a denial of service, resulting in a NULL pointer dereference and panic, via crafted network traffic.

Recommendations For Linux kernel versions prior to 4.2.2, update to version 4.2.2 or later to resolve the issue.

Exploit

Correção

Identificadores relacionados

ALT-PU-2015-1834

ALT-PU-2016-1485

CESA-2016_2574

CVE-2015-8746

RHSA-2016:2574

RHSA-2016:2584

RHSA-2016_2574

RHSA-2016_2584

Produtos afetados

Alt Linux

Centos

Linux Kernel

Red Hat

Referências · 20

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/overlayfs_priv_esc.rb · Exploit
• 🔥 https://github.com/xairy/kernel-exploits/tree/master/CVE-2016-2384 · Exploit
• 🔥 https://github.com/Kagami/docker_cve-2015-2925 · Exploit
• 🔥 https://github.com/whu-enjoy/CVE-2015-8660 · Exploit
• https://github.com/torvalds/linux/commit/18e3b739fdc826481c6a1335ce0c5b19b3d415da · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=1295802 · Nota
• http://securitytracker.com/id/1034594 · Nota
• https://osv.dev/vulnerability/CVE-2015-8746 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2015-8746 · Aviso do Fabricante
• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=18e3b739fdc826481c6a1335ce0c5b19b3d415da · Nota
• https://ubuntu.com/security/CVE-2015-8746 · Aviso do Fabricante
• http://rhn.redhat.com/errata/RHSA-2016-2584.html · Aviso do Fabricante
• http://rhn.redhat.com/errata/RHSA-2016-2574.html · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2015-8746 · Aviso do Fabricante
• https://linux.oracle.com/errata/ELSA-2016-2574.html · Aviso do Fabricante