The asn1_ber_decoder function in lib/asn1_decoder.c in the Linux kernel before 4.3 allows attackers to cause a denial of service (panic) via an ASN.1 BER file that lacks a public key, leading to mishandling by the public_key_verify_signature function in crypto/asymmetric_keys/public_key.c.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 2, 2016 |
| Oracle_linux | — | Upgrade kernel-uek-develUpgrade kernelUpgrade kernel-uek-firmwareUpgrade kernel-uekUpgrade kernel-uek-debugUpgrade kernel-uek-debug-develUpgrade dtrace-modulesUpgrade kernel-uek-doc | Nov 9, 2016 | May 2, 2016 |
| Redhat_linux | — | Upgrade kernel-tools-debuginfoUpgrade kernel-rt-trace-develUpgrade kernel-kdump-develUpgrade kernel-debuginfo-common-ppc64Upgrade kernel-debug-develUpgrade kernel-rt-trace-debuginfoUpgrade perfUpgrade kernel-rt-develUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-rt-debugUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-develUpgrade kernel-debugUpgrade kernel-rt-debug-debuginfoUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-kdumpUpgrade kernel-bootwrapperUpgrade kernel-rt-traceUpgrade kernel-debug-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-rtUpgrade kernel-docUpgrade kernel-debuginfo-common-s390xUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-abi-whitelistsUpgrade perf-debuginfoUpgrade kernel-rt-docUpgrade kernel-kdump-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-tools-libs-devel | Nov 4, 2016 | May 2, 2016 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-ec2-extraUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-ec2Upgrade kernel-ec2-devel | Jun 21, 2016 | May 2, 2016 |
| Ubuntu | — | Upgrade linux-lts-trustyUpgrade linux-lts-utopicUpgrade linux-raspi2Upgrade linux-lts-wilyUpgrade linuxUpgrade linux-lts-vivid | Nov 19, 2024 | May 2, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub