CVSS2
Attack Vector
LOCAL
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:H/Au:N/C:N/I:N/A:C
AI Score
Confidence
Low
EPSS
Percentile
5.1%
The log_prefix function in kernel/printk.c in the Linux kernel 3.x before 3.4.33 does not properly remove a prefix string from a syslog header, which allows local users to cause a denial of service (buffer overflow and system crash) by leveraging /dev/kmsg write access and triggering a call_console_drivers function call.
Vendor | Product | Version | CPE |
---|---|---|---|
linux | linux_kernel | 3.4.31 | cpe:/o:linux:linux_kernel:3.4.31::: |
linux | linux_kernel | 3.4.15 | cpe:/o:linux:linux_kernel:3.4.15::: |
linux | linux_kernel | 3.4.32 | cpe:/o:linux:linux_kernel:3.4.32::: |
linux | linux_kernel | 3.0.44 | cpe:/o:linux:linux_kernel:3.0.44::: |
linux | linux_kernel | 3.1.1 | cpe:/o:linux:linux_kernel:3.1.1::: |
linux | linux_kernel | 3.0.43 | cpe:/o:linux:linux_kernel:3.0.43::: |
linux | linux_kernel | 3.3 | cpe:/o:linux:linux_kernel:3.3:rc2:: |
linux | linux_kernel | 3.1 | cpe:/o:linux:linux_kernel:3.1:rc1:: |
linux | linux_kernel | 3.4.3 | cpe:/o:linux:linux_kernel:3.4.3::: |
linux | linux_kernel | 3.2.8 | cpe:/o:linux:linux_kernel:3.2.8::: |