Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mfgx-frfq-59jc

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.5

Описание

A lack of CPU resource in the Linux kernel tracing module functionality in versions prior to 5.14-rc3 was found in the way user uses trace ring buffer in a specific way. Only privileged local users (with CAP_SYS_ADMIN capability) could use this flaw to starve the resources causing denial of service.

A lack of CPU resource in the Linux kernel tracing module functionality in versions prior to 5.14-rc3 was found in the way user uses trace ring buffer in a specific way. Only privileged local users (with CAP_SYS_ADMIN capability) could use this flaw to starve the resources causing denial of service.

EPSS

Процентиль: 79%
0.01289
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-400
CWE-835

Связанные уязвимости

CVSS3: 5.5
ubuntu
почти 4 года назад

A lack of CPU resource in the Linux kernel tracing module functionality in versions prior to 5.14-rc3 was found in the way user uses trace ring buffer in a specific way. Only privileged local users (with CAP_SYS_ADMIN capability) could use this flaw to starve the resources causing denial of service.

CVSS3: 5.5
redhat
почти 4 года назад

A lack of CPU resource in the Linux kernel tracing module functionality in versions prior to 5.14-rc3 was found in the way user uses trace ring buffer in a specific way. Only privileged local users (with CAP_SYS_ADMIN capability) could use this flaw to starve the resources causing denial of service.

CVSS3: 5.5
nvd
почти 4 года назад

A lack of CPU resource in the Linux kernel tracing module functionality in versions prior to 5.14-rc3 was found in the way user uses trace ring buffer in a specific way. Only privileged local users (with CAP_SYS_ADMIN capability) could use this flaw to starve the resources causing denial of service.

CVSS3: 5.5
debian
почти 4 года назад

A lack of CPU resource in the Linux kernel tracing module functionalit ...

CVSS3: 5.5
fstec
почти 4 года назад

Уязвимость ядра операционной системы Linux , связанная с неконтролируемым расходом ресурсов, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 79%
0.01289
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-400
CWE-835