CVE-2017-15128

Опубликовано: 14 янв. 2018

Источник: nvd

CVSS3: 5.5

CVSS2: 4.9

EPSS Низкий

Описание

A flaw was found in the hugetlb_mcopy_atomic_pte function in mm/hugetlb.c in the Linux kernel before 4.13.12. A lack of size check could cause a denial of service (BUG).

Ссылки

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=1e3921471354244f70fe268586ff94a97a6dd4df
Patch
Vendor Advisory
https://access.redhat.com/security/cve/CVE-2017-15128
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1525222
Issue Tracking
Patch
Third Party Advisory
https://github.com/torvalds/linux/commit/1e3921471354244f70fe268586ff94a97a6dd4df
Patch
Third Party Advisory
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.12
Issue Tracking
Release Notes
Vendor Advisory
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=1e3921471354244f70fe268586ff94a97a6dd4df
Patch
Vendor Advisory
https://access.redhat.com/security/cve/CVE-2017-15128
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1525222
Issue Tracking
Patch
Third Party Advisory
https://github.com/torvalds/linux/commit/1e3921471354244f70fe268586ff94a97a6dd4df
Patch
Third Party Advisory
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.12
Issue Tracking
Release Notes
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия до 4.13.11 (включая)

Конфигурация 2

Одно из

cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_mrg:2.0:*:*:*:*:*:*:*

EPSS

Процентиль: 14%

0.00046

Низкий

5.5 Medium

CVSS3

4.9 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

CVE-2017-15128

CVSS3: 5.5

ubuntu

больше 7 лет назад

A flaw was found in the hugetlb_mcopy_atomic_pte function in mm/hugetlb.c in the Linux kernel before 4.13.12. A lack of size check could cause a denial of service (BUG).

CVE-2017-15128

CVSS3: 4.7

redhat

больше 7 лет назад

A flaw was found in the hugetlb_mcopy_atomic_pte function in mm/hugetlb.c in the Linux kernel before 4.13.12. A lack of size check could cause a denial of service (BUG).

CVE-2017-15128

CVSS3: 5.5

debian

больше 7 лет назад

A flaw was found in the hugetlb_mcopy_atomic_pte function in mm/hugetl ...

GHSA-78vc-rw83-8p6r

CVSS3: 5.5

github

около 3 лет назад

A flaw was found in the hugetlb_mcopy_atomic_pte function in mm/hugetlb.c in the Linux kernel before 4.13.12. A lack of size check could cause a denial of service (BUG).

ELSA-2019-4850

oracle-oval

больше 5 лет назад

ELSA-2019-4850: Unbreakable Enterprise kernel security update (IMPORTANT)

EPSS

Процентиль: 14%

0.00046

Низкий

5.5 Medium

CVSS3

4.9 Medium

CVSS2

Дефекты

CWE-119