The asn1_ber_decoder function in lib/asn1_decoder.c in the Linux kernel before 4.3 allows attackers to cause a denial of service (panic) via an ASN.1 BER file that lacks a public key, leading to mishandling by the public_key_verify_signature function in crypto/asymmetric_keys/public_key.c.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 2, 2016 |
| Oracle_linux | — | Upgrade dtrace-modulesUpgrade kernel-uek-debug-develUpgrade kernel-uek-debugUpgrade kernel-uek-docUpgrade kernel-uek-firmwareUpgrade kernel-uekUpgrade kernelUpgrade kernel-uek-devel | Nov 9, 2016 | May 2, 2016 |
| Redhat_linux | — | Upgrade kernel-kdumpUpgrade kernel-debugUpgrade kernel-rt-debugUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-rt-trace-debuginfoUpgrade kernel-rt-develUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-kdump-develUpgrade kernel-rt-trace-develUpgrade kernel-debuginfo-common-ppc64Upgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade perfUpgrade kernel-develUpgrade python-perfUpgrade kernel-debug-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernel-docUpgrade kernel-rtUpgrade kernel-abi-whitelistsUpgrade kernel-rt-docUpgrade kernel-kdump-debuginfoUpgrade kernel-bootwrapperUpgrade kernel-rt-debuginfoUpgrade kernel-debuginfo-common-s390xUpgrade kernel-tools-libs-develUpgrade kernel-rt-traceUpgrade kernel-tools | Nov 4, 2016 | May 2, 2016 |
| Suse | — | Upgrade kernel-ec2Upgrade kernel-ec2-develUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-ec2-extra | Jun 21, 2016 | May 2, 2016 |
| Ubuntu | — | Upgrade linux-raspi2Upgrade linux-lts-wilyUpgrade linux-lts-utopicUpgrade linux-lts-trustyUpgrade linuxUpgrade linux-lts-vivid | Nov 19, 2024 | May 2, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub