Denial Of Service (DoS)

2019-01-1509:22:37

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.0004 Low

EPSS

Percentile

0.4%

JSON

kernel-rt is vulnerable to denial of service (DoS) attacks. The vulnerability exists as the XFRM dump policy implementation in net/xfrm/xfrm_user.c in the Linux kernel before 4.13.11 allows local users to gain privileges or cause a denial of service (use-after-free) via a crafted SO_RCVBUF setsockopt system call in conjunction with XFRM_MSG_GETPOLICY Netlink messages.

CPENameOperatorVersion
kernel-rteq3.10.0__229.rt56.162.el6rt
kernel-rteq3.10.0__229.rt56.153.el6rt
kernel-rteq3.10.0__693.2.2.rt56.588.el6rt
kernel-rteq3.10.0__514.rt56.231.el6rt
kernel-rteq3.8.13__rt14.20.el6rt
kernel-rteq3.0.9__rt26.45.el6rt
kernel-rteq3.10.0__327.rt56.176.el6rt
kernel-rteq3.10.0__693.37.4.rt56.629.el6rt
kernel-rteq3.10.0__514.rt56.219.el6rt
kernel-rteq3.10.0__693.35.1.rt56.625.el6rt

Name	Operator	Version
kernel-rt	eq	3.10.0__229.rt56.162.el6rt
kernel-rt	eq	3.10.0__229.rt56.153.el6rt
kernel-rt	eq	3.10.0__693.2.2.rt56.588.el6rt
kernel-rt	eq	3.10.0__514.rt56.231.el6rt
kernel-rt	eq	3.8.13__rt14.20.el6rt
kernel-rt	eq	3.0.9__rt26.45.el6rt
kernel-rt	eq	3.10.0__327.rt56.176.el6rt
kernel-rt	eq	3.10.0__693.37.4.rt56.629.el6rt
kernel-rt	eq	3.10.0__514.rt56.219.el6rt
kernel-rt	eq	3.10.0__693.35.1.rt56.625.el6rt