Denial Of Service (DoS)

2020-04-1000:56:08

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

5.4 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:P/I:N/A:C

JSON

Kernel is vulnerable to denial of service (DoS). The attack is possible due to a missing validation of a null-terminated string data structure element in the bnep_sock_ioctl() function, allowing a local user to cause an information leak or a denial of service.

CPENameOperatorVersion
kerneleq2.6.18__8.1.6.el5
kerneleq2.6.18__128.1.1.el5
kerneleq2.6.18__53.1.21.el5
kerneleq2.6.18__128.1.14.el5
kerneleq2.6.18__164.11.1.el5
kerneleq2.6.18__194.26.1.el5
kerneleq2.6.18__128.30.1.el5
kerneleq2.6.18__8.1.15.el5
kerneleq2.6.32__71.14.1.el6
kerneleq2.6.18__8.1.14.el5

Name	Operator	Version
kernel	eq	2.6.18__8.1.6.el5
kernel	eq	2.6.18__128.1.1.el5
kernel	eq	2.6.18__53.1.21.el5
kernel	eq	2.6.18__128.1.14.el5
kernel	eq	2.6.18__164.11.1.el5
kernel	eq	2.6.18__194.26.1.el5
kernel	eq	2.6.18__128.30.1.el5
kernel	eq	2.6.18__8.1.15.el5
kernel	eq	2.6.32__71.14.1.el6
kernel	eq	2.6.18__8.1.14.el5