net/sctp/sm_sideeffect.c in the Linux kernel before 4.3 does not properly manage the relationship between a lock and a socket, which allows local users to cause a denial of service (deadlock) via a crafted sctp_accept call.
CVSS Details
- CVSS 3.1 Base Score: 6.2
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-firmwareUpgrade kernel-docUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade python-perfUpgrade kernel-tools-libs-develUpgrade kernel-abi-whitelistsUpgrade kernel-headers | Jul 6, 2016 | Feb 7, 2016 |
| Debian | — | Upgrade linux | Mar 4, 2016 | Feb 7, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade python-perfUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade perfUpgrade kernel-tools | Nov 30, 2017 | Feb 7, 2016 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | May 3, 2016 | Feb 8, 2016 |
| Redhat_linux | — | Upgrade perfUpgrade kernel-kdumpUpgrade kernel-tools-libsUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debugUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-debuginfo-common-ppc64Upgrade kernel-rt-debug-develUpgrade kernel-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debuginfoUpgrade kernel-rt-develUpgrade kernel-headersUpgrade kernel-debug-debuginfoUpgrade kernel-rt-trace-debuginfoUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-kdump-develUpgrade kernel-firmwareUpgrade kernel-debuginfo-common-i686No solution existsUpgrade kernel-rtUpgrade kernel-rt-trace-develUpgrade python-perfUpgrade kernel-rt-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-s390xUpgrade perf-debuginfoUpgrade kernel-docUpgrade kernel-abi-whitelistsUpgrade kernel-rt-traceUpgrade kernel-tools-libs-develUpgrade kernel-kdump-debuginfoUpgrade kernel-bootwrapperUpgrade kernel-rt-docUpgrade python-perf-debuginfoUpgrade kernel-tools | Jul 29, 2016 | Feb 7, 2016 |
| Suse | — | Upgrade kernel-ec2Upgrade kernel-defaultUpgrade kernel-ec2-extraUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-ec2-devel | Mar 28, 2016 | Feb 7, 2016 |
| Ubuntu | — | Upgrade linux-image-3.16.0-67-generic-lpaeUpgrade linux-image-3.16.0-67-powerpc64-smpUpgrade linux-image-3.19.0-56-powerpc-e500mcUpgrade linux-image-3.2.0-1480-omap4Upgrade linux-image-3.13.0-96-powerpc-smpUpgrade linux-image-3.2.0-102-generic-paeUpgrade linux-image-3.16.0-67-powerpc-smpUpgrade linux-image-3.13.0-96-powerpc64-smpUpgrade linux-image-4.2.0-34-genericUpgrade linux-image-3.16.0-67-lowlatencyUpgrade linux-image-4.2.0-34-powerpc-smpUpgrade linux-image-4.2.0-34-powerpc64-embUpgrade linux-image-3.19.0-56-generic-lpaeUpgrade linux-image-3.19.0-56-genericUpgrade linux-image-3.2.0-102-omapUpgrade linux-image-4.2.0-34-powerpc-e500mcUpgrade linux-image-3.19.0-56-lowlatencyUpgrade linux-image-3.13.0-96-genericUpgrade linux-image-3.2.0-102-powerpc64-smpUpgrade linux-image-3.2.0-102-powerpc-smpUpgrade linux-image-3.19.0-56-powerpc-smpUpgrade linux-image-3.13.0-96-lowlatencyUpgrade linux-image-3.19.0-56-powerpc64-smpUpgrade linux-image-3.13.0-96-powerpc-e500mcUpgrade linux-image-3.16.0-67-powerpc-e500mcUpgrade linux-image-3.13.0-96-powerpc64-embUpgrade linux-image-4.2.0-34-powerpc64-smpUpgrade linux-image-4.2.0-1027-raspi2Upgrade linux-image-3.16.0-67-powerpc64-embUpgrade linux-image-4.2.0-34-generic-lpaeUpgrade linux-image-3.13.0-96-powerpc-e500Upgrade linux-image-3.2.0-102-virtualUpgrade linux-image-3.13.0-96-generic-lpaeUpgrade linux-image-3.19.0-56-powerpc64-embUpgrade linux-image-3.2.0-102-genericUpgrade linux-image-3.2.0-102-highbankUpgrade linux-image-3.16.0-67-genericUpgrade linux-image-4.2.0-34-lowlatency | Mar 22, 2016 | Feb 7, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub