Veracode Vulnerability DatabaseVERACODE:17715Denial Of Service (DoS)
5.1 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
4.7 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:N/I:N/A:C
Linux kernel is vulnerable to denial of service(DoS) attacks. A race condition flaw occurs in the ioctl_send_fib() function in the Linux kernel’s aacraid implementation. This allows a local user to cause out-of-bound access and crash the system by changing a certain size value.
References
lists.opensuse.org/opensuse-security-announce/2016-08/msg00048.html
lists.opensuse.org/opensuse-security-announce/2016-08/msg00049.html
lists.opensuse.org/opensuse-security-announce/2016-08/msg00050.html
lists.opensuse.org/opensuse-security-announce/2016-08/msg00051.html
lists.opensuse.org/opensuse-security-announce/2016-08/msg00052.html
lists.opensuse.org/opensuse-security-announce/2016-08/msg00053.html
lists.opensuse.org/opensuse-security-announce/2016-08/msg00054.html
lists.opensuse.org/opensuse-security-announce/2016-09/msg00001.html
rhn.redhat.com/errata/RHSA-2016-2574.html
rhn.redhat.com/errata/RHSA-2016-2584.html
rhn.redhat.com/errata/RHSA-2017-0817.html
www.securityfocus.com/archive/1/539074/30/0/threaded
www.securityfocus.com/bid/92214
access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/6.9_Release_Notes/index.html
access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/6.9_Technical_Notes/index.html
access.redhat.com/errata/RHSA-2017:0817
access.redhat.com/security/cve/CVE-2017-5551
access.redhat.com/security/updates/classification/#moderate
bugzilla.redhat.com/show_bug.cgi?id=1325766
bugzilla.redhat.com/show_bug.cgi?id=1362466
bugzilla.redhat.com/show_bug.cgi?id=847106
Related
5.1 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
4.7 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:N/I:N/A:C