Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:40366
HistoryMay 01, 2023 - 10:20 p.m.

Denial Of Services (DoS)

2023-05-0122:20:48
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
denial of services
linux kernel
buffer overflow
user-supplied data
vulnerability
application crash
arbitrary code
security

0.001 Low

EPSS

Percentile

19.5%

Linux kernel is vulnerable to Denial Of Services (DoS). The vulnerability exists due to the heap-based buffer overflow in the library due to the lack of proper validation of the length of user-supplied data before copying it to a fixed length, which allows an attacker to cause an application crash by executing the arbitrary code in the context of the kernel.