Denial Of Service (DoS)

2019-01-1509:17:01

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.047 Low

EPSS

Percentile

92.7%

JSON

kernel is vulnerable to denial of service (DoS) attacks. The vulnerability exists as the tcp_splice_read function in net/ipv4/tcp.c in the Linux kernel before 4.9.11 allows remote attackers to cause a denial of service (infinite loop and soft lockup) via vectors involving a TCP packet with the URG flag.

CPENameOperatorVersion
kerneleq2.6.32__358.123.4.openstack.el6
kerneleq2.6.32__279.5.2.el6
kerneleq2.6.32__279.5.1.el6
kerneleq2.6.32__504.8.1.el6
kerneleq2.6.32__642.6.2.el6
kerneleq2.6.32__358.6.1.el6
kerneleq2.6.32__431.40.2.el6
kerneleq2.6.32__358.0.1.el6
kerneleq2.6.32__358.111.1.openstack.el6
kerneleq2.6.32__642.3.1.el6

Name	Operator	Version
kernel	eq	2.6.32__358.123.4.openstack.el6
kernel	eq	2.6.32__279.5.2.el6
kernel	eq	2.6.32__279.5.1.el6
kernel	eq	2.6.32__504.8.1.el6
kernel	eq	2.6.32__642.6.2.el6
kernel	eq	2.6.32__358.6.1.el6
kernel	eq	2.6.32__431.40.2.el6
kernel	eq	2.6.32__358.0.1.el6
kernel	eq	2.6.32__358.111.1.openstack.el6
kernel	eq	2.6.32__642.3.1.el6