Denial Of Service (DoS)

2019-01-1509:20:55

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

28.1%

JSON

kernel-rt is vulnerable to denial of service (DoS) attacks. The vulnerability exists in the Linux kernel through 4.14.13, the rds_message_alloc_sgs() function does not validate a value that is used during DMA page allocation, leading to a heap-based out-of-bounds write (related to the rds_rdma_extra_size function in net/rds/rdma.c).

CPENameOperatorVersion
kernel-rteq3.10.0__693.17.1.rt56.604.el6rt
kernel-rteq3.10.0__229.rt56.162.el6rt
kernel-rteq3.0.36__rt57.66.el6rt
kernel-rteq3.10.0__229.rt56.153.el6rt
kernel-rteq3.10.0__693.2.2.rt56.588.el6rt
kernel-rteq3.10.0__327.rt56.198.el6rt
kernel-rteq3.0.9__rt26.46.el6rt
kernel-rteq3.10.0__327.rt56.195.el6rt
kernel-rteq3.10.0__514.rt56.231.el6rt
kernel-rteq3.8.13__rt14.20.el6rt

Name	Operator	Version
kernel-rt	eq	3.10.0__693.17.1.rt56.604.el6rt
kernel-rt	eq	3.10.0__229.rt56.162.el6rt
kernel-rt	eq	3.0.36__rt57.66.el6rt
kernel-rt	eq	3.10.0__229.rt56.153.el6rt
kernel-rt	eq	3.10.0__693.2.2.rt56.588.el6rt
kernel-rt	eq	3.10.0__327.rt56.198.el6rt
kernel-rt	eq	3.0.9__rt26.46.el6rt
kernel-rt	eq	3.10.0__327.rt56.195.el6rt
kernel-rt	eq	3.10.0__514.rt56.231.el6rt
kernel-rt	eq	3.8.13__rt14.20.el6rt