The mpi_powm function in lib/mpi/mpi-pow.c in the Linux kernel through 4.8.11 does not ensure that memory is allocated for limb data, which allows local users to cause a denial of service (stack memory corruption and panic) via an add_key system call for an RSA key with a zero exponent.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade kernel | Jan 5, 2017 | Nov 27, 2016 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Apr 13, 2017 | Nov 27, 2016 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 28, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-headersUpgrade python-perfUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-devel | Nov 30, 2017 | Nov 27, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade perfUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade python-perfUpgrade kernelUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64 | Nov 30, 2017 | Nov 27, 2016 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Dec 9, 2016 | Nov 15, 2016 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Apr 12, 2017 | Nov 27, 2016 |
| Ubuntu | — | Upgrade linux-image-generic-lts-trustyUpgrade linux-image-powerpc-e500mcUpgrade linux-image-3.13.0-132-powerpc-smpUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-3.13.0-132-powerpc64-embUpgrade linux-image-powerpc-e500Upgrade linux-image-3.13.0-132-powerpc64-smpUpgrade linux-image-3.13.0-132-genericUpgrade linux-image-3.13.0-132-powerpc-e500mcUpgrade linux-image-3.13.0-132-powerpc-e500Upgrade linux-image-powerpc64-embUpgrade linux-image-3.13.0-132-lowlatencyUpgrade linux-image-powerpc64-smpUpgrade linux-image-3.13.0-132-generic-lpaeUpgrade linux-image-powerpc-smp | Sep 19, 2017 | Nov 27, 2016 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 28, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub