PT-2017-18676 · Linux+1 · Linux Kernel+1

Kinglong Mee · Publicado 2017-05-18 · Atualizado 2019-10-03 · CVE-2017-9059

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.11.1

Description The issue allows local users to cause a denial of service by leveraging improper channel callback shutdown when unmounting an NFSv4 filesystem. This is due to a "module reference and kernel daemon" leak in the NFSv4 implementation.

Recommendations For versions prior to 4.11.1, update to version 4.11.1 or later to resolve the issue.

Correção

DoS

Improper Resource Release

Enumeração de Fraquezas

CWE-404

Identificadores relacionados

ALT-PU-2017-1854

ALT-PU-2018-1991

CVE-2017-9059

Produtos afetados

Alt Linux

Linux Kernel

Referências · 12

• https://github.com/torvalds/linux/commit/c70422f760c120480fee4de6c38804c72aa26bc1 · Correção
• https://osv.dev/vulnerability/CVE-2017-9059 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2017-9059 · Nota de Segurança
• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c70422f760c120480fee4de6c38804c72aa26bc1 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2017-9059 · Nota de Segurança
• https://ubuntu.com/security/CVE-2017-9059 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-9059 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2017-9059 · Aviso do Fabricante
• http://securityfocus.com/bid/98551 · Nota
• https://spinics.net/lists/linux-nfs/msg63334.html · Correção
• https://security-tracker.debian.org/tracker/CVE-2017-9059 · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=1451386 · Correção