PT-2016-6802 · Linux+4 · Linux Kernel+4
Cai Qian
·
Publicado
2016-07-14
·
Atualizado
2018-01-05
·
CVE-2016-6213
CVSS v3.1
4.7
Média
| Vetor | AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 4.9
Description
The issue allows local users to cause a denial of service, resulting in memory consumption and deadlock, by exploiting the lack of restriction on the number of mounts in a mount namespace. This can be achieved through MS BIND mount system calls, as demonstrated by a loop that triggers exponential growth in the number of mounts.
Recommendations
For Linux kernel versions prior to 4.9, update to version 4.9 or later to resolve the issue.
Correção
DoS
Resource Exhaustion
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Centos
Linux Kernel
Red Hat
Ubuntu