PT-2017-2371 · Linux+3 · Linux Kernel+3

Publicado

2017-04-09

·

Atualizado

2023-02-14

·

CVE-2017-7618

CVSS v2.0

7.8

Alta

VetorAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel versions through 4.10.9
Description The issue is related to the crypto/ahash.c component in the Linux kernel, which can lead to a denial of service due to infinite recursion. This occurs when an attacker triggers EBUSY on a full queue, causing the API operation to call its own callback.
Recommendations For Linux kernel versions through 4.10.9, update to a version later than 4.10.9 to resolve the issue.

Correção

DoS

Infinite Loop

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-835

Identificadores relacionados

ALT-PU-2017-1507
ALT-PU-2017-1508
BDU:2017-01571
CVE-2017-7618
DLA-922-1
OPENSUSE-SU-2017_1140-1
OPENSUSE-SU-2017_1215-1
SUSE-SU-2017:1853-1
SUSE-SU-2017:1990-1
USN-3312-1
USN-3312-2
USN-3314-1
USN-3361-1

Produtos afetados

Alt Linux
Linux Kernel
Suse
Ubuntu