The asn1_ber_decoder function in lib/asn1_decoder.c in the Linux kernel before 4.3 allows attackers to cause a denial of service (panic) via an ASN.1 BER file that lacks a public key, leading to mishandling by the public_key_verify_signature function in crypto/asymmetric_keys/public_key.c.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 2, 2016 |
| Oracle_linux | — | Upgrade kernel-uek-debugUpgrade kernel-uek-docUpgrade kernel-uek-debug-develUpgrade dtrace-modulesUpgrade kernel-uek-firmwareUpgrade kernelUpgrade kernel-uekUpgrade kernel-uek-devel | Nov 9, 2016 | May 2, 2016 |
| Redhat_linux | — | Upgrade kernel-rt-docUpgrade kernel-rtUpgrade python-perfUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-rt-traceUpgrade kernel-tools-libs-develUpgrade kernel-bootwrapperUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-s390xUpgrade kernel-kdump-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernel-abi-whitelistsUpgrade kernel-toolsUpgrade kernel-docUpgrade kernel-headersUpgrade kernel-rt-debugUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-develUpgrade kernel-kdump-develUpgrade kernel-debugUpgrade kernel-rt-trace-develUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-rt-trace-debuginfoUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernelUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-ppc64Upgrade kernel-kdump | Nov 4, 2016 | May 2, 2016 |
| Suse | — | Upgrade kernel-ec2-develUpgrade kernel-ec2Upgrade kernel-defaultUpgrade kernel-ec2-extraUpgrade kernel-obs-buildUpgrade kernel-docs | Jun 21, 2016 | May 2, 2016 |
| Ubuntu | — | Upgrade linux-lts-trustyUpgrade linux-lts-utopicUpgrade linux-lts-wilyUpgrade linux-raspi2Upgrade linux-lts-vividUpgrade linux | Nov 19, 2024 | May 2, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub