Lucene search

Veracode Vulnerability DatabaseVERACODE:20167

HistoryMay 16, 2019 - 3:58 a.m.

Denial Of Service (DoS)

2019-05-1603:58:47

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

4.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

JSON

Linux kernel is vulnerable to denial of service (DoS) attacks. The vulnerability exists in ntfs_read_locked_inode in the ntfs.ko filesystem driver in the Linux kernel. An attacker could cause an application crash via a crafted ntfs filesystem triggering a use-after-free read.

CPENameOperatorVersion
kernel-rteq3.10.0__693.25.7.rt56.615.el6rt
kernel-rteq3.10.0__693.17.1.rt56.604.el6rt
kernel-rteq3.0.36__rt57.66.el6rt
kernel-rteq3.10.0__229.rt56.162.el6rt
kernel-rteq3.10.0__327.rt56.198.el6rt
kernel-rteq3.10.0__693.2.2.rt56.588.el6rt
kernel-rteq3.10.0__229.rt56.153.el6rt
kernel-rteq3.0.9__rt26.46.el6rt
kernel-rteq3.10.0__327.rt56.195.el6rt
kernel-rteq3.10.0__693.5.2.rt56.592.el6rt

Name	Operator	Version
kernel-rt	eq	3.10.0__693.25.7.rt56.615.el6rt
kernel-rt	eq	3.10.0__693.17.1.rt56.604.el6rt
kernel-rt	eq	3.0.36__rt57.66.el6rt
kernel-rt	eq	3.10.0__229.rt56.162.el6rt
kernel-rt	eq	3.10.0__327.rt56.198.el6rt
kernel-rt	eq	3.10.0__693.2.2.rt56.588.el6rt
kernel-rt	eq	3.10.0__229.rt56.153.el6rt
kernel-rt	eq	3.0.9__rt26.46.el6rt
kernel-rt	eq	3.10.0__327.rt56.195.el6rt
kernel-rt	eq	3.10.0__693.5.2.rt56.592.el6rt

Rows per page:

1-10 of 1221

References

www.securityfocus.com/bid/104588

access.redhat.com/errata/RHSA-2019:0641

access.redhat.com/security/updates/classification/#important

bugs.launchpad.net/ubuntu/+source/linux/+bug/1763403

bugzilla.redhat.com/show_bug.cgi?id=1674935

marc.info/?l=linux-ntfs-dev&m=152413769810234&w=2

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

4.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

JSON

Related for VERACODE:20167