The mpi_powm function in lib/mpi/mpi-pow.c in the Linux kernel through 4.8.11 does not ensure that memory is allocated for limb data, which allows local users to cause a denial of service (stack memory corruption and panic) via an add_key system call for an RSA key with a zero exponent.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade kernel | Jan 5, 2017 | Nov 27, 2016 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Apr 13, 2017 | Nov 27, 2016 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 28, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-tools-libsUpgrade perfUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-headersUpgrade kernel-debugUpgrade python-perf | Nov 30, 2017 | Nov 27, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade perfUpgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade kernel-headersUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-toolsUpgrade kernel-devel | Nov 30, 2017 | Nov 27, 2016 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Dec 9, 2016 | Nov 15, 2016 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Apr 12, 2017 | Nov 27, 2016 |
| Ubuntu | — | Upgrade linux-image-3.13.0-132-powerpc-smpUpgrade linux-image-lowlatencyUpgrade linux-image-3.13.0-132-powerpc64-embUpgrade linux-image-generic-lts-trustyUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-generic-lpaeUpgrade linux-image-powerpc-e500Upgrade linux-image-genericUpgrade linux-image-powerpc-e500mcUpgrade linux-image-3.13.0-132-powerpc-e500mcUpgrade linux-image-3.13.0-132-genericUpgrade linux-image-powerpc64-smpUpgrade linux-image-powerpc-smpUpgrade linux-image-3.13.0-132-powerpc-e500Upgrade linux-image-3.13.0-132-generic-lpaeUpgrade linux-image-3.13.0-132-powerpc64-smpUpgrade linux-image-3.13.0-132-lowlatencyUpgrade linux-image-powerpc64-emb | Sep 19, 2017 | Nov 27, 2016 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 28, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub