PT-2018-2814 · Linux · Linux

Publicado

2018-12-03

·

Atualizado

2018-12-03

CVSS v2.0

4.9

Média

VetorAV:L/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Linux (affected versions not specified)
Description The issue is related to a memory deallocation error in the kalmia bind kernel handler implementation for Linux. When a Samsung Kalmia based LTE USB modem is connected, it can cause a denial of service due to an incorrect situation in the usb bulk msg function. Specifically, in the kalmia init and get ethernet addr function, memory is allocated in usb buf, but if an error code is returned from kalmia send init packet due to an error in usb bulk msg, the memory in usb buf is not released.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Leak

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2019-02271

Produtos afetados

Linux