PT-2016-5388 · Linux+5 · Linux Kernel+5

Solar Designer

·

Publicado

2016-04-12

·

Atualizado

2023-09-12

·

CVE-2016-3156

CVSS v3.1

5.5

Média

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.5.2
Description The issue concerns the IPv4 implementation in the Linux kernel, which fails to properly handle the destruction of device objects. This allows guest OS users to cause a denial of service, resulting in a host OS networking outage, by arranging for a large number of IP addresses.
Recommendations For Linux kernel versions prior to 4.5.2, update to version 4.5.2 or later to resolve the issue.

Exploit

Correção

DoS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

ALT-PU-2016-1352
ALT-PU-2017-1330
CESA-2016_2574
CVE-2016-3156
DSA-3607-1
OPENSUSE-SU-2016_1382-1
OPENSUSE-SU-2016_2144-1
OPENSUSE-SU-2016_2290-1
RHSA-2016:2574
RHSA-2016:2584
RHSA-2016_2574
RHSA-2016_2584
SUSE-SU-2016:1019-1
SUSE-SU-2016:1203-1
SUSE-SU-2016:1672-1
SUSE-SU-2016:1690-1
SUSE-SU-2016:1707-1
SUSE-SU-2016:1764-1
SUSE-SU-2016:2074-1
USN-2965-1
USN-2965-2
USN-2965-3
USN-2965-4
USN-2968-1
USN-2968-2
USN-2969-1
USN-2970-1
USN-2971-1
USN-2971-2
USN-2971-3
USN-2996-1
USN-2997-1

Produtos afetados

Alt Linux
Centos
Linux Kernel
Red Hat
Suse
Ubuntu