Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:11631
HistoryJan 15, 2019 - 9:05 a.m.

Denial Of Service (DoS)

2019-01-1509:05:17
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

Linux kernel is vulnerable to denial of service. The InfiniBand subsystem does not properly sanitize input parameters while registering memory regions from user space via the (u)verbs API, allowing a local user with access to a /dev/infiniband/uverbsX device crash the system or escalate their privileges on the system.

References

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C