Veracode Vulnerability DatabaseVERACODE:12372Denial Of Service (DoS)
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
4.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:N/I:N/A:C
Linux kernel is vulnerable to denial of service. Linux kernel built with the Kernel-based Virtual Machine (CONFIG_KVM) support is vulnerable to a null pointer dereference flaw. It could occur on x86 platform, when emulating an undefined instruction. An attacker could use this flaw to crash the host kernel resulting in DoS.
References
git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d9092f52d7e61dd1557f2db2400ddb430e85937e
rhn.redhat.com/errata/RHSA-2017-0386.html
rhn.redhat.com/errata/RHSA-2017-0387.html
www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.7
www.openwall.com/lists/oss-security/2016/11/22/3
www.securityfocus.com/bid/94459
access.redhat.com/errata/RHSA-2017:0386
access.redhat.com/errata/RHSA-2017:0387
access.redhat.com/security/cve/CVE-2016-8630
access.redhat.com/security/updates/classification/#important
bugzilla.redhat.com/show_bug.cgi?id=1393350
bugzilla.redhat.com/show_bug.cgi?id=1415172
github.com/torvalds/linux/commit/d9092f52d7e61dd1557f2db2400ddb430e85937e
Related
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
4.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:N/I:N/A:C