Veracode Vulnerability DatabaseVERACODE:18887Denial Of Service (DoS)
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
4.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:N/I:N/A:C
Linux kernel is vulnerable to NULL pointer dereference vulnerability. This occurs in the Key Management sub component in Linux kernel when trying to issue a KEYTCL_READ on a negative key. Local attackers could cause a denial of service conditions via a crafted KEYCTL_READ operation.
References
git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=37863c43b2c6464f252862bf2e9768264e961678
seclists.org/oss-sec/2017/q4/63
www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.5
access.redhat.com/articles/3327131
access.redhat.com/errata/RHSA-2018:0151
access.redhat.com/errata/RHSA-2018:0152
access.redhat.com/errata/RHSA-2018:0181
access.redhat.com/errata/RHSA-2018:0654
access.redhat.com/errata/RHSA-2020:2430
access.redhat.com/security/cve/CVE-2015-8539
access.redhat.com/security/cve/CVE-2017-12192
access.redhat.com/security/cve/CVE-2017-12193
access.redhat.com/security/cve/CVE-2017-15649
access.redhat.com/security/cve/CVE-2017-5715
access.redhat.com/security/cve/CVE-2017-5753
access.redhat.com/security/cve/CVE-2017-5754
access.redhat.com/security/cve/CVE-2017-7472
access.redhat.com/security/updates/classification/#important
access.redhat.com/security/vulnerabilities/speculativeexecution
bugzilla.redhat.com/show_bug.cgi?id=1493435
bugzilla.redhat.com/show_bug.cgi?id=1519778
bugzilla.redhat.com/show_bug.cgi?id=1519780
bugzilla.redhat.com/show_bug.cgi?id=1519781
github.com/torvalds/linux/commit/37863c43b2c6464f252862bf2e9768264e961678
lkml.org/lkml/2017/9/18/764
usn.ubuntu.com/3583-1/
usn.ubuntu.com/3583-2/
Related
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
4.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:N/I:N/A:C