PT-2016-4071 · Linux+4 · Linux Kernel+4

Publicado

2015-10-06

·

Atualizado

2018-01-05

·

CVE-2015-8956

CVSS v3.1

6.1

Média

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.2
Description The issue allows local users to obtain sensitive information or cause a denial of service (NULL pointer dereference) via vectors involving a bind system call on a Bluetooth RFCOMM socket. This is due to a problem in the rfcomm sock bind function in net/bluetooth/rfcomm/sock.c.
Recommendations For Linux kernel versions prior to 4.2, update to version 4.2 or later to resolve the issue.

Exploit

Correção

DoS

NULL Pointer Dereference

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

ALT-PU-2015-1834
ALT-PU-2016-1485
CESA-2016_2574
CVE-2015-8956
DLA-670-1
DSA-3696-1
OPENSUSE-SU-2016_2625-1
OPENSUSE-SU-2016_3021-1
OPENSUSE-SU-2016_3058-1
RHSA-2016:2574
RHSA-2016:2584
RHSA-2016_2574
RHSA-2016_2584
SUSE-SU-2016:2912-1
SUSE-SU-2016:2976-1
SUSE-SU-2016:3304-1
SUSE-SU-2016_2912-1
SUSE-SU-2017:0333-1
SUSE-SU-2017:0471-1
SUSE-SU-2017:0494-1
SUSE-SU-2017:1102-1

Produtos afetados

Alt Linux
Centos
Linux Kernel
Red Hat
Suse