PT-2016-4081 · Linux+4 · Linux Kernel+4

Dmitry Vyukov

·

Publicado

2016-02-20

·

Atualizado

2023-02-13

·

CVE-2015-8970

CVSS v3.1

5.5

Média

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.4.2
Description The issue allows local users to cause a denial of service, resulting in a system crash due to a NULL pointer dereference. This occurs when a crafted application does not supply a key, related to the lrw crypt function.
Recommendations For Linux kernel versions prior to 4.4.2, update to version 4.4.2 or later to resolve the issue.

Exploit

Correção

DoS

NULL Pointer Dereference

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

ALT-PU-2016-1137
ALT-PU-2016-1485
CESA-2017_1842
CVE-2015-8970
RHSA-2017:1842
RHSA-2017:2077
RHSA-2017:2437
RHSA-2017:2444
RHSA-2017_1842
RHSA-2017_2077
SUSE-SU-2017:0494-1
SUSE-SU-2017:1301-1
SUSE-SU-2017:2342-1

Produtos afetados

Alt Linux
Centos
Linux Kernel
Red Hat
Suse