Denial Of Service (DoS)

2019-05-0206:09:11

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.0004 Low

EPSS

Percentile

15.7%

JSON

kernel-rt is vulnerable to denial of service (DoS) attacks. This vulnerability exists in mplementation of setsockopt for the SO_{SND|RCV}BUFFORCE setsockopt() system call in the Linux kernel. Local users could trigger this call and create a situation in which the sockets sendbuff data size could be negative which could adversely affect memory allocations, cause memory corruption or application crashes.

CPENameOperatorVersion
kernel-rteq3.10.0__229.rt56.162.el6rt
kernel-rteq3.0.36__rt57.66.el6rt
kernel-rteq3.10.0__229.rt56.153.el6rt
kernel-rteq3.10.0__327.rt56.198.el6rt
kernel-rteq3.0.9__rt26.46.el6rt
kernel-rteq3.10.0__327.rt56.195.el6rt
kernel-rteq3.8.13__rt14.20.el6rt
kernel-rteq3.10.0__327.rt56.197.el6rt
kernel-rteq3.10.0__514.rt56.210.el6rt
kernel-rteq3.0.9__rt26.45.el6rt

Name	Operator	Version
kernel-rt	eq	3.10.0__229.rt56.162.el6rt
kernel-rt	eq	3.0.36__rt57.66.el6rt
kernel-rt	eq	3.10.0__229.rt56.153.el6rt
kernel-rt	eq	3.10.0__327.rt56.198.el6rt
kernel-rt	eq	3.0.9__rt26.46.el6rt
kernel-rt	eq	3.10.0__327.rt56.195.el6rt
kernel-rt	eq	3.8.13__rt14.20.el6rt
kernel-rt	eq	3.10.0__327.rt56.197.el6rt
kernel-rt	eq	3.10.0__514.rt56.210.el6rt
kernel-rt	eq	3.0.9__rt26.45.el6rt