Denial Of Service (DoS)

2019-01-1508:53:05

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

JSON

kernel-rt is vulnerable to denial of service (DoS) attacks. The vulnerability exists through an integer overflow issue in drivers/gpu/drm/i915/i915_gem_execbuffer.c in the i915 driver in the Direct Rendering Manager (DRM) subsystem in the Linux kernel through 3.8.3, as used in Google Chrome OS before 25.0.1364.173 and other products, allows local users to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted application that triggers many relocation copies, and potentially leads to a race condition.

CPENameOperatorVersion
kernel-rteq3.0.18__rt34.53.el6rt
kernel-rteq3.0.36__rt57.66.el6rt
kernel-rteq3.0.30__rt50.62.el6rt
kernel-rteq2.6.33.9__rt31.79.el6rt
kernel-rteq3.6.11__rt30.25.el6rt
kernel-rteq3.2.33__rt50.66.el6rt
kernel-rteq3.2.23__rt37.56.el6rt
kernel-rteq3.0.9__rt26.46.el6rt
kernel-rteq2.6.33.9__rt31.66.el6rt
kernel-rteq2.6.33.9__rt31.74.el6rt

Name	Operator	Version
kernel-rt	eq	3.0.18__rt34.53.el6rt
kernel-rt	eq	3.0.36__rt57.66.el6rt
kernel-rt	eq	3.0.30__rt50.62.el6rt
kernel-rt	eq	2.6.33.9__rt31.79.el6rt
kernel-rt	eq	3.6.11__rt30.25.el6rt
kernel-rt	eq	3.2.33__rt50.66.el6rt
kernel-rt	eq	3.2.23__rt37.56.el6rt
kernel-rt	eq	3.0.9__rt26.46.el6rt
kernel-rt	eq	2.6.33.9__rt31.66.el6rt
kernel-rt	eq	2.6.33.9__rt31.74.el6rt