PT-2016-7432 · Linux+3 · Linux Kernel+3
Publicado
2016-03-17
·
Atualizado
2017-06-07
·
CVE-2016-7917
CVSS v3.1
5.0
Média
| Vetor | AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 4.5
Description
The issue allows local users to obtain sensitive information from kernel memory or cause a denial of service by leveraging the CAP NET ADMIN capability. This is due to the nfnetlink rcv batch function in net/netfilter/nfnetlink.c not checking whether a batch message's length field is large enough, potentially leading to an infinite loop or out-of-bounds read.
Recommendations
For Linux kernel versions prior to 4.5, update to version 4.5 or later to resolve the issue. As a temporary workaround, consider restricting the use of the CAP NET ADMIN capability to minimize the risk of exploitation.
Correção
DoS
Out of bounds Read
Information Disclosure
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Linux Kernel
Suse
Ubuntu