Veracode Vulnerability DatabaseVERACODE:18230Denial Of Service (DoS)
4.7 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
4.7 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:N/I:N/A:C
Linux kernel is vulnerable to denial of service attacks. A race condition between direct and memory-mapped I/O which is handled with BUG_ON instead of an I/O failure enables local users to cause a denial of service via system crash. Affected is the functionality of file fs/xfs/xfs_aops.c of the component IO Handler.
References
git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=04197b341f23b908193308b8d63d17ff23232598
www.securityfocus.com/bid/106822
access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/7.4_Release_Notes/index.html
access.redhat.com/errata/RHSA-2017:2077
access.redhat.com/security/cve/CVE-2016-10741
access.redhat.com/security/cve/CVE-2017-2584
access.redhat.com/security/cve/CVE-2017-5551
access.redhat.com/security/cve/CVE-2017-7495
access.redhat.com/security/updates/classification/#important
bugzilla.redhat.com/show_bug.cgi?id=1377840
bugzilla.redhat.com/show_bug.cgi?id=1378172
bugzilla.redhat.com/show_bug.cgi?id=1389215
bugzilla.redhat.com/show_bug.cgi?id=1400188
bugzilla.redhat.com/show_bug.cgi?id=1414052
bugzilla.redhat.com/show_bug.cgi?id=1421801
bugzilla.redhat.com/show_bug.cgi?id=1421810
bugzilla.redhat.com/show_bug.cgi?id=1425780
bugzilla.redhat.com/show_bug.cgi?id=1426661
bugzilla.redhat.com/show_bug.cgi?id=1427626
bugzilla.redhat.com/show_bug.cgi?id=1427647
bugzilla.redhat.com/show_bug.cgi?id=1427991
bugzilla.redhat.com/show_bug.cgi?id=1428890
bugzilla.redhat.com/show_bug.cgi?id=1428943
bugzilla.redhat.com/show_bug.cgi?id=1429610
bugzilla.redhat.com/show_bug.cgi?id=1429640
bugzilla.redhat.com/show_bug.cgi?id=1429951
bugzilla.redhat.com/show_bug.cgi?id=1429977
bugzilla.redhat.com/show_bug.cgi?id=1430023
bugzilla.redhat.com/show_bug.cgi?id=1430038
bugzilla.redhat.com/show_bug.cgi?id=1430074
bugzilla.redhat.com/show_bug.cgi?id=1430353
bugzilla.redhat.com/show_bug.cgi?id=1430926
bugzilla.redhat.com/show_bug.cgi?id=1430946
bugzilla.redhat.com/show_bug.cgi?id=1431104
bugzilla.redhat.com/show_bug.cgi?id=1432118
bugzilla.redhat.com/show_bug.cgi?id=1434616
bugzilla.redhat.com/show_bug.cgi?id=1438512
bugzilla.redhat.com/show_bug.cgi?id=1441552
bugzilla.redhat.com/show_bug.cgi?id=1452240
bugzilla.redhat.com/show_bug.cgi?id=1459056
bugzilla.suse.com/show_bug.cgi?id=1124010
cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.3
github.com/torvalds/linux/commit/04197b341f23b908193308b8d63d17ff23232598
lists.debian.org/debian-lts-announce/2019/03/msg00034.html
lists.debian.org/debian-lts-announce/2019/04/msg00004.html
Related
4.7 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
4.7 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:N/I:N/A:C