Arbitrary Code Execution

2020-04-1000:22:55

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

JSON

kernel is vulnerable to arbitrary code execution. A missing length validation check in the Linux kernel DCCP module reconciliation feature allows a local unprivileged user to cause a heap overflow, gaining privileges for arbitrary code execution.

CPENameOperatorVersion
kerneleq2.6.18__8.1.14.el5
kerneleq2.6.18__8.1.3.el5
kerneleq2.6.18__92.1.1.el5
kerneleq2.6.18__8.1.3.lspp.80.el5
kerneleq2.6.18__8.1.8.el5
kerneleq2.6.18__53.1.4.el5
kerneleq2.6.18__8.1.3.lspp.81.el5
kerneleq2.6.18__8.1.1.el5
kerneleq2.6.18__8.1.4.el5
kerneleq2.6.18__53.1.14.el5

Name	Operator	Version
kernel	eq	2.6.18__8.1.14.el5
kernel	eq	2.6.18__8.1.3.el5
kernel	eq	2.6.18__92.1.1.el5
kernel	eq	2.6.18__8.1.3.lspp.80.el5
kernel	eq	2.6.18__8.1.8.el5
kernel	eq	2.6.18__53.1.4.el5
kernel	eq	2.6.18__8.1.3.lspp.81.el5
kernel	eq	2.6.18__8.1.1.el5
kernel	eq	2.6.18__8.1.4.el5
kernel	eq	2.6.18__53.1.14.el5