Denial Of Service (DoS)

2020-09-2106:24:28

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

JSON

linux is vulnerable to denial of service (DoS). The vulnerability exists through a memory leak in the adis_update_scan_mode_burst() function in drivers/iio/imu/adis_buffer.c which allows an attacker to crash the application via malicious input.

CPENameOperatorVersion
linux-azure:eoaneq5.3.0.1003.20
linux-kvm:eoaneq5.3.0.1003.3
linux-oracle:eoaneq5.3.0.1002.2
linux-gcp:eoaneq5.3.0.1004.4
linux-aws:eoaneq5.3.0.1003.4
linux-gke-4.15:bioniceq4.15.0.1066.68
linux-gke-4.15:bioniceq4.15.0.1069.73
linux-aws:bioniceq4.15.0.1007.7
linux-aws-hwe:xenialeq4.15.0.1082.78
linux-aws-hwe:xenialeq4.15.0.1083.79

Name	Operator	Version
linux-azure:eoan	eq	5.3.0.1003.20
linux-kvm:eoan	eq	5.3.0.1003.3
linux-oracle:eoan	eq	5.3.0.1002.2
linux-gcp:eoan	eq	5.3.0.1004.4
linux-aws:eoan	eq	5.3.0.1003.4
linux-gke-4.15:bionic	eq	4.15.0.1066.68
linux-gke-4.15:bionic	eq	4.15.0.1069.73
linux-aws:bionic	eq	4.15.0.1007.7
linux-aws-hwe:xenial	eq	4.15.0.1082.78
linux-aws-hwe:xenial	eq	4.15.0.1083.79