CVE-2016-2053

Опубликовано: 02 мая 2016

Источник: nvd

CVSS3: 4.7

CVSS2: 4.7

EPSS Низкий

Описание

The asn1_ber_decoder function in lib/asn1_decoder.c in the Linux kernel before 4.3 allows attackers to cause a denial of service (panic) via an ASN.1 BER file that lacks a public key, leading to mishandling by the public_key_verify_signature function in crypto/asymmetric_keys/public_key.c.

Ссылки

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0d62e9dd6da45bbf0f33a8617afc5fe774c8f45f
Vendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00003.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00008.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00009.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00014.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00015.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00016.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00017.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00018.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00019.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00020.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00021.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00022.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00023.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00026.html
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия до 4.3 (исключая)

EPSS

Процентиль: 27%

0.00093

Низкий

4.7 Medium

CVSS3

4.7 Medium

CVSS2

Дефекты

CWE-310

Связанные уязвимости

CVE-2016-2053

CVSS3: 4.7

ubuntu

около 9 лет назад

CVE-2016-2053

redhat

больше 9 лет назад

CVE-2016-2053

CVSS3: 4.7

debian

около 9 лет назад

The asn1_ber_decoder function in lib/asn1_decoder.c in the Linux kerne ...

GHSA-7689-m3w7-j29p

CVSS3: 4.7

github

около 3 лет назад

SUSE-SU-2016:2011-1

suse-cvrf

почти 9 лет назад

Security update for Linux Kernel Live Patch 6 for SLE 12 SP1

EPSS

Процентиль: 27%

0.00093

Низкий

4.7 Medium

CVSS3

4.7 Medium

CVSS2

Дефекты

CWE-310