Arbitrary Code Execution

2019-05-1602:50:39

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.002 Low

EPSS

Percentile

55.0%

JSON

Linux kernel is vulnerable to arbitrary code execution attacks. This occurs where the kernel truncated the value used to indicate the size of a buffer which it would later become zero using an untruncated value. This could corrupt memory outside of the original allocation.

CPENameOperatorVersion
kernel-rteq3.10.0__693.17.1.rt56.604.el6rt
kernel-rteq3.0.36__rt57.66.el6rt
kernel-rteq3.10.0__229.rt56.162.el6rt
kernel-rteq3.10.0__327.rt56.198.el6rt
kernel-rteq3.10.0__693.2.2.rt56.588.el6rt
kernel-rteq3.10.0__229.rt56.153.el6rt
kernel-rteq3.0.9__rt26.46.el6rt
kernel-rteq3.10.0__327.rt56.195.el6rt
kernel-rteq3.10.0__693.5.2.rt56.592.el6rt
kernel-rteq3.10.0__514.rt56.231.el6rt

Name	Operator	Version
kernel-rt	eq	3.10.0__693.17.1.rt56.604.el6rt
kernel-rt	eq	3.0.36__rt57.66.el6rt
kernel-rt	eq	3.10.0__229.rt56.162.el6rt
kernel-rt	eq	3.10.0__327.rt56.198.el6rt
kernel-rt	eq	3.10.0__693.2.2.rt56.588.el6rt
kernel-rt	eq	3.10.0__229.rt56.153.el6rt
kernel-rt	eq	3.0.9__rt26.46.el6rt
kernel-rt	eq	3.10.0__327.rt56.195.el6rt
kernel-rt	eq	3.10.0__693.5.2.rt56.592.el6rt
kernel-rt	eq	3.10.0__514.rt56.231.el6rt