Lucene search

K
ubuntuUbuntuUSN-2719-1
HistoryAug 18, 2015 - 12:00 a.m.

Linux kernel vulnerability

2015-08-1800:00:00
ubuntu.com
34

CVSS2

4.9

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

AI Score

5.2

Confidence

High

EPSS

0

Percentile

10.1%

Releases

  • Ubuntu 15.04

Packages

  • linux - Linux kernel

Details

Marcelo Ricardo Leitner discovered a race condition in the Linux kernel’s
SCTP address configuration lists when using Address Configuration Change
(ASCONF) options on a socket. An unprivileged local user could exploit this
flaw to cause a denial of service (system crash).

CVSS2

4.9

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

AI Score

5.2

Confidence

High

EPSS

0

Percentile

10.1%