Lucene search

Veracode Vulnerability DatabaseVERACODE:18236

HistoryMay 02, 2019 - 6:36 a.m.

Denial Of Service (DoS)

2019-05-0206:36:12

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

JSON

Linux kernel is vulnerable denial of service (DOS) attacks. This occurs if an L2 guest was to throw an exception which is not handled by an L1 guest. Guest OS users could cause a system crash by declining to handle an exception thrown by an L2 guest.

CPENameOperatorVersion
kernel-rteq3.10.0__514.2.2.rt56.424.el7
kernel-rteq3.10.0__514.6.1.rt56.429.el7
kerneleq3.10.0__514.21.2.el7
kerneleq3.10.0__514.26.2.el7
kerneleq3.10.0__514.16.2.p7ih.el7
kerneleq3.10.0__514.16.1.el7
kernel-rteq3.10.0__514.2.2.rt56.424.el7
kernel-rteq3.10.0__514.6.1.rt56.429.el7
kerneleq3.10.0__514.21.2.el7
kerneleq3.10.0__514.26.2.el7

Name	Operator	Version
kernel-rt	eq	3.10.0__514.2.2.rt56.424.el7
kernel-rt	eq	3.10.0__514.6.1.rt56.429.el7
kernel	eq	3.10.0__514.21.2.el7
kernel	eq	3.10.0__514.26.2.el7
kernel	eq	3.10.0__514.16.2.p7ih.el7
kernel	eq	3.10.0__514.16.1.el7
kernel-rt	eq	3.10.0__514.2.2.rt56.424.el7
kernel-rt	eq	3.10.0__514.6.1.rt56.429.el7
kernel	eq	3.10.0__514.21.2.el7
kernel	eq	3.10.0__514.26.2.el7

Rows per page:

1-10 of 121

References

git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ef85b67385436ddc1998f45f1d6a210f935b3388

www.debian.org/security/2017/dsa-3804

www.openwall.com/lists/oss-security/2016/12/15/3

www.securityfocus.com/bid/94933

access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/7.4_Release_Notes/index.html

access.redhat.com/errata/RHSA-2017:1842

access.redhat.com/errata/RHSA-2017:2077

access.redhat.com/security/cve/CVE-2016-10741

access.redhat.com/security/cve/CVE-2016-9588

access.redhat.com/security/cve/CVE-2017-2584

access.redhat.com/security/cve/CVE-2017-5551

access.redhat.com/security/cve/CVE-2017-7495

access.redhat.com/security/updates/classification/#important

bugzilla.redhat.com/show_bug.cgi?id=1377840

bugzilla.redhat.com/show_bug.cgi?id=1378172

bugzilla.redhat.com/show_bug.cgi?id=1389215

bugzilla.redhat.com/show_bug.cgi?id=1400188

bugzilla.redhat.com/show_bug.cgi?id=1404924

bugzilla.redhat.com/show_bug.cgi?id=1414052

bugzilla.redhat.com/show_bug.cgi?id=1421801

bugzilla.redhat.com/show_bug.cgi?id=1421810

bugzilla.redhat.com/show_bug.cgi?id=1425780

bugzilla.redhat.com/show_bug.cgi?id=1426661

bugzilla.redhat.com/show_bug.cgi?id=1427626

bugzilla.redhat.com/show_bug.cgi?id=1427647

bugzilla.redhat.com/show_bug.cgi?id=1427991

bugzilla.redhat.com/show_bug.cgi?id=1428890

bugzilla.redhat.com/show_bug.cgi?id=1428943

bugzilla.redhat.com/show_bug.cgi?id=1429610

bugzilla.redhat.com/show_bug.cgi?id=1429640

bugzilla.redhat.com/show_bug.cgi?id=1429951

bugzilla.redhat.com/show_bug.cgi?id=1429977

bugzilla.redhat.com/show_bug.cgi?id=1430023

bugzilla.redhat.com/show_bug.cgi?id=1430038

bugzilla.redhat.com/show_bug.cgi?id=1430074

bugzilla.redhat.com/show_bug.cgi?id=1430353

bugzilla.redhat.com/show_bug.cgi?id=1430926

bugzilla.redhat.com/show_bug.cgi?id=1430946

bugzilla.redhat.com/show_bug.cgi?id=1431104

bugzilla.redhat.com/show_bug.cgi?id=1432118

bugzilla.redhat.com/show_bug.cgi?id=1434616

bugzilla.redhat.com/show_bug.cgi?id=1438512

bugzilla.redhat.com/show_bug.cgi?id=1441552

bugzilla.redhat.com/show_bug.cgi?id=1452240

bugzilla.redhat.com/show_bug.cgi?id=1459056

github.com/torvalds/linux/commit/ef85b67385436ddc1998f45f1d6a210f935b3388

usn.ubuntu.com/3822-1/

usn.ubuntu.com/3822-2/

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

JSON

Related for VERACODE:18236