PT-2017-6844 · Linux · Linux Kernel

Adam Mariš · Publicado 2016-06-13 · Atualizado 2019-03-07 · CVE-2015-5327

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linux kernels versions 4.3-rc1 and later

Description The issue is related to an out-of-bounds memory read in the x509 decode time function, located in the x509 cert parser.c file. This problem affects Linux kernels.

Recommendations For Linux kernels versions 4.3-rc1 and later, consider applying a patch to fix the out-of-bounds memory read issue in the x509 decode time function. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

CVE-2015-5327

MGASA-2016-0225

MGASA-2016-0232

MGASA-2016-0233

Produtos afetados

Linux Kernel

Referências · 34

• https://bugs.mageia.org/show_bug.cgi?id=18688 · Nota
• http://kernelnewbies.org/Linux_4.2 · Nota
• https://linux.oracle.com/errata/ELSA-2019-4642.html · Aviso do Fabricante
• https://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.1 · Nota
• https://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.8 · Nota
• https://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.9 · Nota
• https://osv.dev/vulnerability/MGASA-2016-0232 · Aviso do Fabricante
• https://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.11 · Nota
• https://bugs.mageia.org/show_bug.cgi?id=18375 · Nota
• https://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.12 · Nota
• http://kernelnewbies.org/Linux_4.3 · Nota
• https://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.7 · Nota
• https://ubuntu.com/security/CVE-2015-5327 · Aviso do Fabricante
• https://osv.dev/vulnerability/MGASA-2016-0225 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2015-5327 · Nota de Segurança