Lucene search

Veracode Vulnerability DatabaseVERACODE:16471

HistoryMay 02, 2019 - 5:18 a.m.

Denial Of Service (DoS)

2019-05-0205:18:24

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

JSON

kernel is vulnerable to denial of service. A remote attacker is able to crash the application using an incorrect checksum in a UDP packet. This is due to inappropriate -EAGAIN return values from the udp_recvmsg and udpv6_recvmsg functions.

CPENameOperatorVersion
kernel-rteq3.6.11.2__rt33.39.el6rt
kernel-rteq3.8.13__rt14.25.el6rt
kernel-rteq3.0.18__rt34.53.el6rt
kernel-rteq3.0.36__rt57.66.el6rt
kernel-rteq3.2.23__rt37.56.el6rt
kernel-rteq2.6.33.9__rt31.79.el6rt
kernel-rteq3.2.33__rt50.66.el6rt
kernel-rteq3.10.0__229.rt56.153.el6rt
kernel-rteq3.0.9__rt26.46.el6rt
kernel-rteq3.6.11.5__rt37.55.el6rt

Name	Operator	Version
kernel-rt	eq	3.6.11.2__rt33.39.el6rt
kernel-rt	eq	3.8.13__rt14.25.el6rt
kernel-rt	eq	3.0.18__rt34.53.el6rt
kernel-rt	eq	3.0.36__rt57.66.el6rt
kernel-rt	eq	3.2.23__rt37.56.el6rt
kernel-rt	eq	2.6.33.9__rt31.79.el6rt
kernel-rt	eq	3.2.33__rt50.66.el6rt
kernel-rt	eq	3.10.0__229.rt56.153.el6rt
kernel-rt	eq	3.0.9__rt26.46.el6rt
kernel-rt	eq	3.6.11.5__rt37.55.el6rt

Rows per page:

1-10 of 2681

References

git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=beb39db59d14990e401e235faf66a6b9b31240b0

kb.juniper.net/InfoCenter/index?page=content&id=JSA10761

lists.opensuse.org/opensuse-security-announce/2015-07/msg00023.html

lists.opensuse.org/opensuse-security-announce/2015-07/msg00049.html

lists.opensuse.org/opensuse-security-announce/2015-08/msg00011.html

lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html

lists.opensuse.org/opensuse-security-announce/2015-09/msg00007.html

lists.opensuse.org/opensuse-security-announce/2015-09/msg00008.html

lists.opensuse.org/opensuse-security-announce/2015-09/msg00009.html

lists.opensuse.org/opensuse-security-announce/2015-09/msg00010.html

lists.opensuse.org/opensuse-security-announce/2015-09/msg00011.html

lists.opensuse.org/opensuse-security-announce/2015-09/msg00018.html

lists.opensuse.org/opensuse-security-announce/2015-09/msg00021.html

rhn.redhat.com/errata/RHSA-2015-1623.html

rhn.redhat.com/errata/RHSA-2015-1778.html

rhn.redhat.com/errata/RHSA-2015-1787.html

rhn.redhat.com/errata/RHSA-2016-0045.html

rhn.redhat.com/errata/RHSA-2016-1096.html

rhn.redhat.com/errata/RHSA-2016-1100.html

www.debian.org/security/2015/dsa-3313

www.debian.org/security/2015/dsa-3329

www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.0.6

www.openwall.com/lists/oss-security/2015/06/30/13

www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html

www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html

www.securityfocus.com/bid/75510

www.securitytracker.com/id/1032794

www.ubuntu.com/usn/USN-2680-1

www.ubuntu.com/usn/USN-2681-1

www.ubuntu.com/usn/USN-2682-1

www.ubuntu.com/usn/USN-2683-1

www.ubuntu.com/usn/USN-2684-1

www.ubuntu.com/usn/USN-2713-1

www.ubuntu.com/usn/USN-2714-1

access.redhat.com/errata/RHSA-2016:1225

access.redhat.com/security/updates/classification/#important

bugzilla.redhat.com/show_bug.cgi?id=1239029

bugzilla.redhat.com/show_bug.cgi?id=1245345

github.com/torvalds/linux/commit/beb39db59d14990e401e235faf66a6b9b31240b0

rhn.redhat.com/errata/RHSA-2015-1787.html

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

JSON

Related for VERACODE:16471