PT-2017-7798 · Linux+5 · Linux Kernel+5

Andrey Konovalov

+1

·

Publicado

2016-12-11

·

Atualizado

2023-06-07

·

CVE-2016-10200

CVSS v3.1

7.0

Alta

VetorAV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.8.14
Description A race condition exists in the L2TPv3 IP Encapsulation feature, allowing local users to gain privileges or cause a denial of service. This issue is related to the net/l2tp/l2tp ip.c and net/l2tp/l2tp ip6.c files. The problem occurs when multiple bind system calls are made without properly checking whether a socket has the SOCK ZAPPED status, resulting in a use-after-free condition.
Recommendations For Linux kernel versions prior to 4.8.14, update to version 4.8.14 or later to resolve the issue.

Correção

DoS

Race Condition

Use After Free

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-362CWE-264CWE-416

Identificadores relacionados

ALT-PU-2016-2436
ALT-PU-2016-2437
CESA-2017_1842
CVE-2016-10200
DLA-922-1
OPENSUSE-SU-2017_0906-1
OPENSUSE-SU-2017_0907-1
RHSA-2017:1842
RHSA-2017:2077
RHSA-2017:2437
RHSA-2017:2444
RHSA-2017_1842
RHSA-2017_2077
SUSE-SU-2017:1183-1
SUSE-SU-2017:1247-1
SUSE-SU-2017:1301-1
SUSE-SU-2017:1360-1
SUSE-SU-2017:1990-1
SUSE-SU-2017:2342-1
SUSE-SU-2017:2525-1
USN-3422-1
USN-3422-2

Produtos afetados

Alt Linux
Centos
Linux Kernel
Red Hat
Suse
Ubuntu