net/sctp/sm_sideeffect.c in the Linux kernel before 4.3 does not properly manage the relationship between a lock and a socket, which allows local users to cause a denial of service (deadlock) via a crafted sctp_accept call.
CVSS Details
- CVSS 3.1 Base Score: 6.2
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-abi-whitelistsUpgrade python-perfUpgrade kernel-tools-libs-develUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-docUpgrade kernel-firmwareUpgrade perfUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-debug | Jul 6, 2016 | Feb 7, 2016 |
| Debian | — | Upgrade linux | Mar 4, 2016 | Feb 7, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade perfUpgrade kernel-develUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-debugUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-tools-libs | Nov 30, 2017 | Feb 7, 2016 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | May 3, 2016 | Feb 8, 2016 |
| Redhat_linux | — | Upgrade kernel-rt-docUpgrade kernel-rt-traceUpgrade kernel-bootwrapperUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-s390xUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-abi-whitelistsUpgrade kernel-tools-libs-develUpgrade python-perf-debuginfoUpgrade kernel-kdump-debuginfoUpgrade kernel-toolsUpgrade kernel-rt-trace-develUpgrade kernel-rt-debuginfoUpgrade kernel-rtUpgrade python-perfUpgrade kernel-docUpgrade kernel-debug-develUpgrade kernel-kdump-develUpgrade kernel-kdumpUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debuginfo-common-i686Upgrade kernel-rt-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-rt-debugUpgrade kernel-firmwareUpgrade kernel-rt-trace-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-ppc64No solution existsUpgrade kernel-debugUpgrade kernel-headersUpgrade kernel-rt-develUpgrade kernel-rt-debug-develUpgrade perfUpgrade kernel-develUpgrade kernel-debug-debuginfo | Jul 29, 2016 | Feb 7, 2016 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-ec2Upgrade kernel-obs-buildUpgrade kernel-ec2-extraUpgrade kernel-ec2-devel | Mar 28, 2016 | Feb 7, 2016 |
| Ubuntu | — | Upgrade linux-image-3.19.0-56-powerpc-smpUpgrade linux-image-4.2.0-1027-raspi2Upgrade linux-image-4.2.0-34-lowlatencyUpgrade linux-image-4.2.0-34-generic-lpaeUpgrade linux-image-3.13.0-96-generic-lpaeUpgrade linux-image-3.13.0-96-lowlatencyUpgrade linux-image-3.2.0-102-powerpc64-smpUpgrade linux-image-3.19.0-56-powerpc64-smpUpgrade linux-image-3.13.0-96-genericUpgrade linux-image-3.19.0-56-powerpc64-embUpgrade linux-image-3.16.0-67-genericUpgrade linux-image-3.2.0-102-powerpc-smpUpgrade linux-image-3.16.0-67-powerpc-e500mcUpgrade linux-image-3.2.0-102-virtualUpgrade linux-image-3.13.0-96-powerpc-e500Upgrade linux-image-3.13.0-96-powerpc64-embUpgrade linux-image-3.2.0-102-highbankUpgrade linux-image-4.2.0-34-powerpc64-smpUpgrade linux-image-3.13.0-96-powerpc-e500mcUpgrade linux-image-3.2.0-102-genericUpgrade linux-image-3.16.0-67-powerpc64-embUpgrade linux-image-3.19.0-56-genericUpgrade linux-image-3.13.0-96-powerpc64-smpUpgrade linux-image-3.16.0-67-generic-lpaeUpgrade linux-image-3.2.0-102-generic-paeUpgrade linux-image-4.2.0-34-powerpc64-embUpgrade linux-image-3.13.0-96-powerpc-smpUpgrade linux-image-3.16.0-67-lowlatencyUpgrade linux-image-4.2.0-34-powerpc-e500mcUpgrade linux-image-3.2.0-1480-omap4Upgrade linux-image-4.2.0-34-genericUpgrade linux-image-3.16.0-67-powerpc64-smpUpgrade linux-image-3.2.0-102-omapUpgrade linux-image-3.19.0-56-powerpc-e500mcUpgrade linux-image-3.19.0-56-generic-lpaeUpgrade linux-image-3.16.0-67-powerpc-smpUpgrade linux-image-3.19.0-56-lowlatencyUpgrade linux-image-4.2.0-34-powerpc-smp | Mar 22, 2016 | Feb 7, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub