Veracode Vulnerability DatabaseVERACODE:14991Denial Of Service (DoS)
0.0004 Low
EPSS
Percentile
10.1%
kernel-rt is vulnerable to denial of service (DoS). The vulnerability exists by leveraging root privileges for a zero-length write operation in the lbs_debugfs_write function.
References
git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a497e47d4aec37aaf8f13509f3ef3d1f6a717d88
git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=a497e47d4aec37aaf8f13509f3ef3d1f6a717d88
linux.oracle.com/errata/ELSA-2014-0771.html
linux.oracle.com/errata/ELSA-2014-3043.html
lists.opensuse.org/opensuse-security-announce/2014-02/msg00002.html
lists.opensuse.org/opensuse-updates/2014-02/msg00045.html
rhn.redhat.com/errata/RHSA-2014-0100.html
secunia.com/advisories/59262
secunia.com/advisories/59309
secunia.com/advisories/59406
www.openwall.com/lists/oss-security/2013/11/22/5
www.securityfocus.com/bid/63886
www.ubuntu.com/usn/USN-2064-1
www.ubuntu.com/usn/USN-2065-1
www.ubuntu.com/usn/USN-2066-1
www.ubuntu.com/usn/USN-2067-1
www.ubuntu.com/usn/USN-2070-1
www.ubuntu.com/usn/USN-2075-1
www.ubuntu.com/usn/USN-2111-1
www.ubuntu.com/usn/USN-2112-1
www.ubuntu.com/usn/USN-2114-1
www.ubuntu.com/usn/USN-2115-1
www.ubuntu.com/usn/USN-2116-1
access.redhat.com/security/updates/classification/#important
access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_MRG/2/html/Technical_Notes/RHSA-2014-0100.html
bugzilla.redhat.com/show_bug.cgi?id=1016729
bugzilla.redhat.com/show_bug.cgi?id=1033578
bugzilla.redhat.com/show_bug.cgi?id=1037770
bugzilla.redhat.com/show_bug.cgi?id=1039743
github.com/torvalds/linux/commit/a497e47d4aec37aaf8f13509f3ef3d1f6a717d88
rhn.redhat.com/errata/RHSA-2014-0100.html
Related
