Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:12578
HistoryJan 15, 2019 - 9:19 a.m.

Denial Of Service (DoS)

2019-01-1509:19:00
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

4.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

JSON

kernel-rt is vulnerable to denial of service (DoS) attacks. The vulnerability exists as crypto/algif_skcipher.c in the Linux kernel before 4.4.2 does not verify that a setkey operation has been performed on an AF_ALG socket before an accept system call is processed, which allows local users to cause a denial of service (NULL pointer dereference and system crash) via a crafted application that does not supply a key, related to the lrw_crypt function in crypto/lrw.c.

Related

cve 1
debiancve 1
ubuntucve 1
prion 1
nessus 13
redhat 4
suse 3
openvas 3
ibm 2
oraclelinux 2
centos 1
cve
cve
CVE-2015-8970
2016-11-28 03:59:00
debiancve
debiancve
CVE-2015-8970
2016-11-28 03:59:00
ubuntucve
ubuntucve
CVE-2015-8970
2016-11-28 00:00:00
prion
prion
Null pointer dereference
2016-11-28 03:59:00
nessus
nessus
RHEL 6 : MRG (RHSA-2017:2444)
2017-08-10 00:00:00
RHEL 7 : kernel (RHSA-2017:2437)
2017-08-10 00:00:00
SUSE SLES11 Security Update : kernel (SUSE-SU-2017:1301-1)
2017-05-16 00:00:00
redhat
redhat
(RHSA-2017:2444) Important: kernel-rt security and bug fix update
2017-08-08 18:31:18
(RHSA-2017:2437) Important: kernel security and bug fix update
2017-08-08 14:58:24
(RHSA-2017:2077) Important: kernel-rt security, bug fix, and enhancement update
2017-08-01 05:57:19
suse
suse
Security update for the Linux Kernel (important)
2017-05-15 21:33:24
Security update for the Linux Kernel (important)
2017-02-17 18:08:18
Security update for the Linux Kernel (important)
2017-09-04 21:11:06
openvas
openvas
Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-1537)
2020-01-23 00:00:00
Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-1489)
2020-01-23 00:00:00
RedHat Update for kernel RHSA-2017:1842-01
2017-08-04 00:00:00
ibm
ibm
Security Bulletin: IBM QRadar Network Security is affected by vulnerabilities in Linux kernel
2018-06-16 22:04:36
Security Bulletin: Vulnerabilities in the Linux kernel affect PowerKVM
2018-06-18 01:40:47
oraclelinux
oraclelinux
kernel security, bug fix, and enhancement update
2017-08-15 00:00:00
kernel security, bug fix, and enhancement update
2017-08-07 00:00:00
centos
centos
kernel, perf, python security update
2017-08-24 01:38:33

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

4.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

JSON
Related for VERACODE:12578
cve1debiancve1ubuntucve1prion1nessus13redhat4suse3openvas3ibm2oraclelinux2centos1