4 matches found
CVE-2015-8019: Improper Input Validation
The skbcopyandcsumdatagramiovec function in net/core/datagram.c in the Linux kernel 3.14.54 and 3.18.22 does not accept a length argument, which allows local users to cause a denial of service memory corruption or possibly have unspecified other impact via a write system call followed by a recvms...
PT-2016-3847
Name of the Vulnerable Software and Affected Versions Linux kernel versions 3.14.54 and 3.18.22 Description The issue is related to the skb copy and csum datagram iovec function in net/core/datagram.c, which does not accept a length argument. This allows local users to cause a denial of service,...
CVE-2013-0290
The skbrecvdatagram function in net/core/datagram.c in the Linux kernel before 3.8 does not properly handle the MSGPEEK flag with zero-length data, which allows local users to cause a denial of service infinite loop and system hang via a crafted application...
CVE-2013-0290: Improper Input Validation
The skbrecvdatagram function in net/core/datagram.c in the Linux kernel before 3.8 does not properly handle the MSGPEEK flag with zero-length data, which allows local users to cause a denial of service infinite loop and system hang via a crafted application...