Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveRedhatCVE-2015-8970
HistoryNov 28, 2016 - 3:59 a.m.

CVE-2015-8970

2016-11-2803:59:02
CWE-476
redhat
web.nvd.nist.gov
98
linux
kernel
denial of service
cve-2015-8970
af_alg socket

CVSS2

4.9

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

5.4

Confidence

High

EPSS

0

Percentile

5.1%

JSON

crypto/algif_skcipher.c in the Linux kernel before 4.4.2 does not verify that a setkey operation has been performed on an AF_ALG socket before an accept system call is processed, which allows local users to cause a denial of service (NULL pointer dereference and system crash) via a crafted application that does not supply a key, related to the lrw_crypt function in crypto/lrw.c.

Affected configurations

Nvd
Node
linuxlinux_kernelRange≤4.4.1
VendorProductVersionCPE
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Related

ubuntucve 1
debiancve 1
cvelist 1
veracode 1
prion 1
nvd 1
nessus 13
redhat 4
suse 3
openvas 5
ibm 2
oraclelinux 2
centos 1
ubuntucve
ubuntucve
CVE-2015-8970
2016-11-28 00:00:00
debiancve
debiancve
CVE-2015-8970
2016-11-28 03:59:02
cvelist
cvelist
CVE-2015-8970
2016-11-28 03:01:00
veracode
veracode
Denial Of Service (DoS)
2019-01-15 09:19:00
prion
prion
Null pointer dereference
2016-11-28 03:59:00
nvd
nvd
CVE-2015-8970
2016-11-28 03:59:02
nessus
nessus
RHEL 6 : MRG (RHSA-2017:2444)
2017-08-10 00:00:00
RHEL 7 : kernel (RHSA-2017:2437)
2017-08-10 00:00:00
SUSE SLES11 Security Update : kernel (SUSE-SU-2017:1301-1)
2017-05-16 00:00:00
redhat
redhat
(RHSA-2017:2444) Important: kernel-rt security and bug fix update
2017-08-08 18:31:18
(RHSA-2017:2437) Important: kernel security and bug fix update
2017-08-08 14:58:24
(RHSA-2017:2077) Important: kernel-rt security, bug fix, and enhancement update
2017-08-01 05:57:19
suse
suse
Security update for the Linux Kernel (important)
2017-05-15 21:33:24
Security update for the Linux Kernel (important)
2017-02-17 18:08:18
Security update for the Linux Kernel (important)
2017-09-04 21:11:06
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2017:1301-1)
2021-06-09 00:00:00
Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-1537)
2020-01-23 00:00:00
Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-1489)
2020-01-23 00:00:00
ibm
ibm
Security Bulletin: IBM QRadar Network Security is affected by vulnerabilities in Linux kernel
2018-06-16 22:04:36
Security Bulletin: Vulnerabilities in the Linux kernel affect PowerKVM
2018-06-18 01:40:47
oraclelinux
oraclelinux
kernel security, bug fix, and enhancement update
2017-08-15 00:00:00
kernel security, bug fix, and enhancement update
2017-08-07 00:00:00
centos
centos
kernel, perf, python security update
2017-08-24 01:38:33

CVSS2

4.9

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

5.4

Confidence

High

EPSS

0

Percentile

5.1%

JSON
Related for CVE-2015-8970
ubuntucve1debiancve1cvelist1veracode1prion1nvd1nessus13redhat4suse3openvas5ibm2oraclelinux2centos1