Denial Of Service (DoS)

2019-11-0600:20:55

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.003 Low

EPSS

Percentile

69.1%

JSON

kernel is vulnerable to arbitrary code execution. Lack of size checks from the reading of extra descriptor in the function __usb_get_extra_descriptor() in drivers/usb/core/usb.c leads to an application crash, and potentially allows an attacker to exploit the vulnerability to execute arbitrary code in the system.

CPENameOperatorVersion
kerneleq3.10.0__229.7.2.ael7b
kerneleq3.10.0__514.16.1.el7
kerneleq3.10.0__514.21.2.el7
kerneleq3.10.0__229.11.1.ael7b
kerneleq3.10.0__693.17.1.el7
kerneleq3.10.0__957.12.1.el7
kerneleq3.10.0__862.6.3.el7
kerneleq3.10.0__862.2.3.el7
kerneleq3.10.0__514.26.2.el7
kerneleq4.18.0__80.1.2.el8_0

Name	Operator	Version
kernel	eq	3.10.0__229.7.2.ael7b
kernel	eq	3.10.0__514.16.1.el7
kernel	eq	3.10.0__514.21.2.el7
kernel	eq	3.10.0__229.11.1.ael7b
kernel	eq	3.10.0__693.17.1.el7
kernel	eq	3.10.0__957.12.1.el7
kernel	eq	3.10.0__862.6.3.el7
kernel	eq	3.10.0__862.2.3.el7
kernel	eq	3.10.0__514.26.2.el7
kernel	eq	4.18.0__80.1.2.el8_0