Lucene search

Veracode Vulnerability DatabaseVERACODE:18243

HistoryMay 02, 2019 - 6:36 a.m.

Denial Of Service (DOS)

2019-05-0206:36:12

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.0004 Low

EPSS

Percentile

15.7%

JSON

Linux kernel is vulnerable to denial of service (DOS) attacks. The vulnerability exists because the ping_unhash function in net/ipv4/ping.c in the Linux kernel is too late in obtaining a certain lock and consequently cannot ensure that disconnect function calls are safe. Local attackers with access to ping sockets could use this flaw to crash the system by leveraging access to the protocol value of IPPROTO_ICMP in a socket system call…

CPENameOperatorVersion
kernel-rteq3.10.0__229.rt56.162.el6rt
kernel-rteq3.0.36__rt57.66.el6rt
kernel-rteq3.10.0__327.rt56.198.el6rt
kernel-rteq3.10.0__229.rt56.153.el6rt
kernel-rteq3.0.9__rt26.46.el6rt
kernel-rteq3.10.0__327.rt56.195.el6rt
kernel-rteq3.10.0__514.rt56.231.el6rt
kernel-rteq3.8.13__rt14.20.el6rt
kernel-rteq3.10.0__327.rt56.197.el6rt
kernel-rteq3.10.0__514.rt56.210.el6rt

Name	Operator	Version
kernel-rt	eq	3.10.0__229.rt56.162.el6rt
kernel-rt	eq	3.0.36__rt57.66.el6rt
kernel-rt	eq	3.10.0__327.rt56.198.el6rt
kernel-rt	eq	3.10.0__229.rt56.153.el6rt
kernel-rt	eq	3.0.9__rt26.46.el6rt
kernel-rt	eq	3.10.0__327.rt56.195.el6rt
kernel-rt	eq	3.10.0__514.rt56.231.el6rt
kernel-rt	eq	3.8.13__rt14.20.el6rt
kernel-rt	eq	3.10.0__327.rt56.197.el6rt
kernel-rt	eq	3.10.0__514.rt56.210.el6rt

Rows per page:

1-10 of 3501

References

openwall.com/lists/oss-security/2017/04/04/8

www.securityfocus.com/bid/97407

access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/7.4_Release_Notes/index.html

access.redhat.com/errata/RHSA-2017:1842

access.redhat.com/errata/RHSA-2017:2077

access.redhat.com/errata/RHSA-2017:2669

access.redhat.com/errata/RHSA-2018:1854

access.redhat.com/security/cve/CVE-2016-10741

access.redhat.com/security/cve/CVE-2017-2584

access.redhat.com/security/cve/CVE-2017-2671

access.redhat.com/security/cve/CVE-2017-5551

access.redhat.com/security/cve/CVE-2017-7495

access.redhat.com/security/updates/classification/#important

bugzilla.redhat.com/show_bug.cgi?id=1377840

bugzilla.redhat.com/show_bug.cgi?id=1378172

bugzilla.redhat.com/show_bug.cgi?id=1389215

bugzilla.redhat.com/show_bug.cgi?id=1400188

bugzilla.redhat.com/show_bug.cgi?id=1414052

bugzilla.redhat.com/show_bug.cgi?id=1421801

bugzilla.redhat.com/show_bug.cgi?id=1421810

bugzilla.redhat.com/show_bug.cgi?id=1425780

bugzilla.redhat.com/show_bug.cgi?id=1426661

bugzilla.redhat.com/show_bug.cgi?id=1427626

bugzilla.redhat.com/show_bug.cgi?id=1427647

bugzilla.redhat.com/show_bug.cgi?id=1427991

bugzilla.redhat.com/show_bug.cgi?id=1428890

bugzilla.redhat.com/show_bug.cgi?id=1428943

bugzilla.redhat.com/show_bug.cgi?id=1429610

bugzilla.redhat.com/show_bug.cgi?id=1429640

bugzilla.redhat.com/show_bug.cgi?id=1429951

bugzilla.redhat.com/show_bug.cgi?id=1429977

bugzilla.redhat.com/show_bug.cgi?id=1430023

bugzilla.redhat.com/show_bug.cgi?id=1430038

bugzilla.redhat.com/show_bug.cgi?id=1430074

bugzilla.redhat.com/show_bug.cgi?id=1430353

bugzilla.redhat.com/show_bug.cgi?id=1430926

bugzilla.redhat.com/show_bug.cgi?id=1430946

bugzilla.redhat.com/show_bug.cgi?id=1431104

bugzilla.redhat.com/show_bug.cgi?id=1432118

bugzilla.redhat.com/show_bug.cgi?id=1434616

bugzilla.redhat.com/show_bug.cgi?id=1436649

bugzilla.redhat.com/show_bug.cgi?id=1438512

bugzilla.redhat.com/show_bug.cgi?id=1441552

bugzilla.redhat.com/show_bug.cgi?id=1452240

bugzilla.redhat.com/show_bug.cgi?id=1459056

git.kernel.org/pub/scm/linux/kernel/git/davem/net.git/commit/net/ipv4/ping.c?id=43a6684519ab0a6c52024b5e25322476cabad893

github.com/danieljiang0415/android_kernel_crash_poc

github.com/torvalds/linux/commit/43a6684519ab0a6c52024b5e25322476cabad893

twitter.com/danieljiang0415/status/845116665184497664

usn.ubuntu.com/3754-1/

www.exploit-db.com/exploits/42135/

0.0004 Low

EPSS

Percentile

15.7%

JSON

Related for VERACODE:18243