CVE-2016-4805

Опубликовано: 23 мая 2016

Источник: nvd

CVSS3: 7.8

CVSS2: 7.2

EPSS Низкий

Описание

Use-after-free vulnerability in drivers/net/ppp/ppp_generic.c in the Linux kernel before 4.5.2 allows local users to cause a denial of service (memory corruption and system crash, or spinlock) or possibly have unspecified other impact by removing a network namespace, related to the ppp_register_net_channel and ppp_unregister_channel functions.

Ссылки

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=1f461dcdd296eecedaffffc6bae2bfa90bd7eb89
Patch
Vendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html
Mailing List
Release Notes
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html
Mailing List
Release Notes
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html
Mailing List
Release Notes
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html
Mailing List
Third Party Advisory
http://www.debian.org/security/2016/dsa-3607
Third Party Advisory
http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.2
Mailing List
Vendor Advisory
http://www.openwall.com/lists/oss-security/2016/05/15/2
Mailing List
Patch
Third Party Advisory
http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html
Third Party Advisory
http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html
Third Party Advisory
http://www.securityfocus.com/bid/90605
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1036763
Third Party Advisory
VDB Entry
http://www.ubuntu.com/usn/USN-3021-1
Third Party Advisory
http://www.ubuntu.com/usn/USN-3021-2
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1335803
Issue Tracking
Third Party Advisory
https://github.com/torvalds/linux/commit/1f461dcdd296eecedaffffc6bae2bfa90bd7eb89
Patch
Third Party Advisory
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=1f461dcdd296eecedaffffc6bae2bfa90bd7eb89
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:-:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:a:novell:suse_linux_enterprise_workstation_extension:12.0:-:*:*:*:*:*:*

Конфигурация 3

cpe:2.3:a:novell:suse_linux_enterprise_module_for_public_cloud:12.0:-:*:*:*:*:*:*

Конфигурация 4

cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp4:*:*:*:*:*:*

Конфигурация 5

cpe:2.3:a:novell:suse_linux_enterprise_module_for_public_cloud:12.0:-:*:*:*:*:*:*

Конфигурация 6

cpe:2.3:o:novell:opensuse_leap:42.1:*:*:*:*:*:*:*

Конфигурация 7

cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:11.0:sp4:*:*:*:*:*:*

Конфигурация 8

cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*

Конфигурация 9

cpe:2.3:o:canonical:ubuntu_linux:12.04:-:lts:*:*:*:*:*

Конфигурация 10

Одно из