Denial Of Service (DoS)

2019-01-1509:15:55

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.0004 Low

EPSS

Percentile

5.1%

JSON

coreutils is vulnerable to denial of service (DoS) attacks. The vulnerability exists as a race condition was found in util-linux before 2.32.1 in the way su handled the management of child processes. A local authenticated attacker could use this flaw to kill other processes with root privileges under specific conditions.

CPENameOperatorVersion
coreutilseq8.4__16.el6.sjis.1
coreutilseq8.4__43.el6_8.sjis.1
coreutilseq8.4__9.el6
coreutilseq8.4__37.el6_7.3
coreutilseq8.4__31.el6_5.2.sjis.1
coreutilseq8.4__13.el6
coreutilseq8.4__37.el6
coreutilseq8.4__31.el6_5.2
coreutilseq8.4__37.el6_6.sjis.1
coreutilseq8.4__16.el6

Name	Operator	Version
coreutils	eq	8.4__16.el6.sjis.1
coreutils	eq	8.4__43.el6_8.sjis.1
coreutils	eq	8.4__9.el6
coreutils	eq	8.4__37.el6_7.3
coreutils	eq	8.4__31.el6_5.2.sjis.1
coreutils	eq	8.4__13.el6
coreutils	eq	8.4__37.el6
coreutils	eq	8.4__31.el6_5.2
coreutils	eq	8.4__37.el6_6.sjis.1
coreutils	eq	8.4__16.el6