PT-2016-7537 · Linux+5 · Linux Kernel+5

Marco Grassi

+1

·

Publicado

2016-11-22

·

Atualizado

2023-02-12

·

CVE-2016-8645

CVSS v3.1

5.5

Média

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.8.10
Description The issue is related to the mishandling of skb truncation in the TCP stack, which can be exploited by local users to cause a denial of service, resulting in a system crash. This can be achieved through a crafted application that utilizes sendto system calls. The problem is associated with the net/ipv4/tcp ipv4.c and net/ipv6/tcp ipv6.c files.
Recommendations For Linux kernel versions prior to 4.8.10, update to version 4.8.10 or later to resolve the issue.

Correção

DoS

Improper Access Control

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

ALT-PU-2016-2327
ALT-PU-2017-1330
CESA-2017_1842
CVE-2016-8645
DLA-772-1
MGASA-2016-0415
MGASA-2017-0003
MGASA-2017-0004
OPENSUSE-SU-2017_0456-1
OPENSUSE-SU-2017_0458-1
RHSA-2017:1842
RHSA-2017:2077
RHSA-2017:2669
RHSA-2017_1842
RHSA-2017_2077
SUSE-SU-2017:0181-1
SUSE-SU-2017:0407-1
SUSE-SU-2017:0464-1
SUSE-SU-2017:0471-1
USN-3161-1
USN-3161-2
USN-3161-3
USN-3161-4
USN-3162-1
USN-3162-2
USN-3290-1

Produtos afetados

Alt Linux
Centos
Linux Kernel
Red Hat
Suse
Ubuntu