Lucene search

Veracode Vulnerability DatabaseVERACODE:17862

HistoryMay 02, 2019 - 6:09 a.m.

Denial Of Service (DoS)

2019-05-0206:09:19

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

JSON

linux kernel is vulnerable to denial of service (DoS) attacks. The vulnerability exists in the implementation of sctp protocol in Linux kernel in which a remote attacker can trigger an out of bounds read with an offset of up to 64kB which may panic the machine with a page-fault.

CPENameOperatorVersion
kernel-rteq3.0.36__rt57.66.el6rt
kernel-rteq3.10.0__229.rt56.162.el6rt
kernel-rteq3.10.0__327.rt56.198.el6rt
kernel-rteq3.10.0__229.rt56.153.el6rt
kernel-rteq3.0.9__rt26.46.el6rt
kernel-rteq3.10.0__327.rt56.195.el6rt
kernel-rteq3.8.13__rt14.20.el6rt
kernel-rteq3.10.0__327.rt56.197.el6rt
kernel-rteq3.0.9__rt26.45.el6rt
kernel-rteq3.10.0__229.rt56.158.el6rt

Name	Operator	Version
kernel-rt	eq	3.0.36__rt57.66.el6rt
kernel-rt	eq	3.10.0__229.rt56.162.el6rt
kernel-rt	eq	3.10.0__327.rt56.198.el6rt
kernel-rt	eq	3.10.0__229.rt56.153.el6rt
kernel-rt	eq	3.0.9__rt26.46.el6rt
kernel-rt	eq	3.10.0__327.rt56.195.el6rt
kernel-rt	eq	3.8.13__rt14.20.el6rt
kernel-rt	eq	3.10.0__327.rt56.197.el6rt
kernel-rt	eq	3.0.9__rt26.45.el6rt
kernel-rt	eq	3.10.0__229.rt56.158.el6rt

Rows per page:

1-10 of 2921

References

git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=bf911e985d6bbaa328c20c3e05f4eb03de11fdd6

lists.opensuse.org/opensuse-security-announce/2016-12/msg00044.html

lists.opensuse.org/opensuse-security-announce/2016-12/msg00054.html

lists.opensuse.org/opensuse-security-announce/2016-12/msg00055.html

lists.opensuse.org/opensuse-security-announce/2016-12/msg00056.html

lists.opensuse.org/opensuse-security-announce/2016-12/msg00067.html

lists.opensuse.org/opensuse-security-announce/2016-12/msg00070.html

lists.opensuse.org/opensuse-security-announce/2016-12/msg00073.html

lists.opensuse.org/opensuse-security-announce/2016-12/msg00076.html

lists.opensuse.org/opensuse-security-announce/2016-12/msg00077.html

lists.opensuse.org/opensuse-security-announce/2016-12/msg00087.html

rhn.redhat.com/errata/RHSA-2017-0086.html

rhn.redhat.com/errata/RHSA-2017-0091.html

rhn.redhat.com/errata/RHSA-2017-0113.html

rhn.redhat.com/errata/RHSA-2017-0307.html

www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.8

www.openwall.com/lists/oss-security/2016/11/22/18

www.securityfocus.com/bid/94479

www.securitytracker.com/id/1037339

access.redhat.com/errata/RHSA-2017:0113

access.redhat.com/security/cve/CVE-2017-13167

access.redhat.com/security/updates/classification/#important

access.redhat.com/security/vulnerabilities/2706661

bto.bluecoat.com/security-advisory/sa134

bugzilla.redhat.com/show_bug.cgi?id=1346444

bugzilla.redhat.com/show_bug.cgi?id=1357997

bugzilla.redhat.com/show_bug.cgi?id=1378982

bugzilla.redhat.com/show_bug.cgi?id=1397930

bugzilla.redhat.com/show_bug.cgi?id=1400193

bugzilla.redhat.com/show_bug.cgi?id=1400305

bugzilla.redhat.com/show_bug.cgi?id=1401779

github.com/torvalds/linux/commit/bf911e985d6bbaa328c20c3e05f4eb03de11fdd6

groups.google.com/forum/#!topic/syzkaller/pAUcHsUJbjk

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

JSON

Related for VERACODE:17862