PT-2016-6185 · Linux+3 · Linux Kernel+3

Baozeng Ding

·

Publicado

2016-05-23

·

Atualizado

2024-06-15

·

CVE-2016-4951

CVSS v3.1

7.8

Alta

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.7
Description The issue is related to the tipc nl publ dump function in the Linux kernel, which does not verify socket existence. This allows local users to cause a denial of service, resulting in a NULL pointer dereference and system crash, or possibly have other unspecified impacts via a dumpit operation.
Recommendations For Linux kernel versions prior to 4.7, update to version 4.7 or later to resolve the issue.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

ALT-PU-2016-1641
ALT-PU-2016-1642
CVE-2016-4951
MGASA-2016-0271
MGASA-2016-0283
MGASA-2016-0284
OPENSUSE-SU-2016_1641-1
OPENSUSE-SU-2016_2290-1
OPENSUSE-SU-2024:10128-1
USN-3016-1
USN-3016-2
USN-3016-3
USN-3016-4
USN-3017-1
USN-3017-2
USN-3017-3
USN-3020-1

Produtos afetados

Alt Linux
Linux Kernel
Suse
Ubuntu