PT-2016-4073 · Linux+1 · Linux Kernel+1

Aaro Koskinen + 46 · Publicado 2013-12-03 · Atualizado 2023-01-19 · CVE-2015-8961

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.3.3

Description The issue allows local users to gain privileges or cause a denial of service (use-after-free) by leveraging improper access to a certain error field in the ext4 journal stop function.

Recommendations For versions prior to 4.3.3, update to version 4.3.3 or later to resolve the issue.

Correção

DoS

Use After Free

Enumeração de Fraquezas

CWE-416

Identificadores relacionados

ALT-PU-2013-1234

ALT-PU-2015-2110

ALT-PU-2015-2119

CVE-2015-8961

Produtos afetados

Alt Linux

Linux Kernel

Referências · 40

• https://github.com/torvalds/linux/commit/6934da9238da947628be83635e365df41064b09b · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7884 · Nota de Segurança
• https://errata.altlinux.org/ALT-PU-2013-1234 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4579 · Nota de Segurança
• https://errata.altlinux.org/ALT-PU-2015-2110 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2015-8961 · Nota de Segurança
• http://securityfocus.com/bid/94135 · Nota
• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6934da9238da947628be83635e365df41064b09b · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2015-04307 · Nota de Segurança
• https://bdu.fstec.ru/vul/2022-01630 · Nota de Segurança
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-8961 · Aviso do Fabricante
• http://spinics.net/lists/netdev/msg318826.html · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7990 · Nota de Segurança
• https://seclists.org/oss-sec/2022/q1/205 · Nota
• https://bdu.fstec.ru/vul/2016-01939 · Nota de Segurança