Veracode Vulnerability DatabaseVERACODE:27778Denial Of Service (DoS)
5.3 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H
5.4 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:N/I:P/A:C
kernel is vulnerable to denial of service (DoS).Lack of validation in get_raw_socket in drivers/vhost/net.c of an sk_family field allows to attacker perform ioctl(2) calls on the ‘/dev/vhost-net’ device may use this flaw to crash the kernel.
References
lists.opensuse.org/opensuse-security-announce/2020-04/msg00035.html
www.openwall.com/lists/oss-security/2020/04/15/4
access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.3_release_notes/index
access.redhat.com/errata/RHSA-2020:4609
access.redhat.com/security/updates/classification/#moderate
cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.5.8
git.kernel.org/linus/42d84c8490f9f0931786f1623191fcab397c3d64
lists.debian.org/debian-lts-announce/2020/06/msg00011.html
lists.debian.org/debian-lts-announce/2020/06/msg00012.html
lists.debian.org/debian-lts-announce/2020/06/msg00013.html
lkml.org/lkml/2020/2/15/125
security.netapp.com/advisory/ntap-20200403-0003/
usn.ubuntu.com/4342-1/
usn.ubuntu.com/4344-1/
usn.ubuntu.com/4345-1/
usn.ubuntu.com/4364-1/
www.debian.org/security/2020/dsa-4667
www.debian.org/security/2020/dsa-4698
Related
5.3 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H
5.4 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:N/I:P/A:C