Veracode Vulnerability DatabaseVERACODE:24958Denial Of Service (DoS)
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
4.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:N/I:N/A:C
kernel is vulnerable to denial of service (DoS). Due to a flaw in the cifs_lookup function in fs/cifs/dir.c, it does not prevent access to a special file as in FIFO demonstration, allowing a local, unprivileged user to cause a denial of service.
References
lists.opensuse.org/opensuse-security-announce/2012-04/msg00021.html
lists.opensuse.org/opensuse-security-announce/2012-05/msg00013.html
rhn.redhat.com/errata/RHSA-2012-0481.html
rhn.redhat.com/errata/RHSA-2012-0531.html
secunia.com/advisories/48842
secunia.com/advisories/48964
www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.10
www.openwall.com/lists/oss-security/2012/02/28/4
access.redhat.com/errata/RHSA-2012:0481
access.redhat.com/security/updates/classification/#moderate
bugzilla.redhat.com/show_bug.cgi?id=798293
docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/6.2_Technical_Notes/kernel.html#RHSA-2012-0481
github.com/torvalds/linux/commit/88d7d4e4a439f32acc56a6d860e415ee71d3df08
Related
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
4.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:N/I:N/A:C