PT-2017-7769 · Linux+5 · Linux Kernel+5

Mikulas Patocka · Publicado 2016-12-19 · Atualizado 2023-02-12 · CVE-2016-10147

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.8.15

Description The issue allows local users to cause a denial of service, resulting in a system crash due to a NULL pointer dereference. This can be achieved by using an AF ALG socket with an incompatible algorithm.

Recommendations For versions prior to 4.8.15, update to version 4.8.15 or later to resolve the issue.

Correção

DoS

NULL Pointer Dereference

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

ALT-PU-2016-2462

ALT-PU-2017-1330

CESA-2017_1842

CVE-2016-10147

OPENSUSE-SU-2017_0458-1

RHSA-2017:1842

RHSA-2017:2077

RHSA-2017_1842

RHSA-2017_2077

USN-3189-1

USN-3189-2

USN-3190-1

USN-3190-2

Produtos afetados

Alt Linux

Centos

Linux Kernel

Red Hat

Suse

Ubuntu

Referências · 26

• https://github.com/torvalds/linux/commit/48a992727d82cb7db076fa15d372178743b1f4cd · Correção
• https://ubuntu.com/security/notices/USN-3189-2 · Aviso do Fabricante
• https://linux.oracle.com/errata/ELSA-2017-1842-1.html · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2017/01/17/13 · Nota
• https://ubuntu.com/security/notices/USN-3190-1 · Aviso do Fabricante
• https://access.redhat.com/errata/RHSA-2017:2077 · Aviso do Fabricante
• https://osv.dev/vulnerability/USN-3189-2 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-3190-2 · Aviso do Fabricante
• https://linux.oracle.com/errata/ELSA-2017-3533.html · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-10147 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2016-8399 · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=1404200 · Nota
• https://osv.dev/vulnerability/USN-3189-1 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-10147 · Nota de Segurança
• https://linux.oracle.com/errata/ELSA-2017-1842.html · Aviso do Fabricante