vulnerability
SUSE: CVE-2016-4470: SUSE Linux Security Advisory
Severity | CVSS | Published | Added | Modified |
---|---|---|---|---|
5 | (AV:L/AC:L/Au:N/C:N/I:N/A:C) | Jun 27, 2016 | Jul 26, 2016 | Feb 4, 2022 |
Severity
5
CVSS
(AV:L/AC:L/Au:N/C:N/I:N/A:C)
Published
Jun 27, 2016
Added
Jul 26, 2016
Modified
Feb 4, 2022
Description
The key_reject_and_link function in security/keys/key.c in the Linux kernel through 4.6.3 does not ensure that a certain data structure is initialized, which allows local users to cause a denial of service (system crash) via vectors involving a crafted keyctl request2 command.
Solution(s)
suse-upgrade-cluster-md-kmp-defaultsuse-upgrade-cluster-network-kmp-defaultsuse-upgrade-dlm-kmp-defaultsuse-upgrade-gfs2-kmp-defaultsuse-upgrade-kernel-defaultsuse-upgrade-kernel-docssuse-upgrade-kernel-ec2suse-upgrade-kernel-ec2-develsuse-upgrade-kernel-ec2-extrasuse-upgrade-kernel-obs-buildsuse-upgrade-ocfs2-kmp-default
References
- SUSE-SUSE-SU-2016:1937-1
- SUSE-SUSE-SU-2016:1961-1
- SUSE-SUSE-SU-2016:1985-1
- SUSE-SUSE-SU-2016:1994-1
- SUSE-SUSE-SU-2016:1995-1
- SUSE-SUSE-SU-2016:1998-1
- SUSE-SUSE-SU-2016:1999-1
- SUSE-SUSE-SU-2016:2000-1
- SUSE-SUSE-SU-2016:2001-1
- SUSE-SUSE-SU-2016:2002-1
- SUSE-SUSE-SU-2016:2003-1
- SUSE-SUSE-SU-2016:2005-1
- SUSE-SUSE-SU-2016:2006-1
- SUSE-SUSE-SU-2016:2007-1
- SUSE-SUSE-SU-2016:2009-1
- SUSE-SUSE-SU-2016:2010-1
- SUSE-SUSE-SU-2016:2011-1
- SUSE-SUSE-SU-2016:2014-1
- SUSE-SUSE-SU-2016:2018-1
- SUSE-SUSE-SU-2016:2105-1
- SUSE-SUSE-SU-2016:2245-1
- SUSE-SUSE-SU-2017:0333-1
- SUSE-SUSE-SU-2017:0471-1
- UBUNTU-USN-3049-1
- UBUNTU-USN-3050-1
- UBUNTU-USN-3051-1
- UBUNTU-USN-3052-1
- UBUNTU-USN-3053-1
- UBUNTU-USN-3054-1
- UBUNTU-USN-3055-1
- UBUNTU-USN-3056-1
- UBUNTU-USN-3057-1
- DEBIAN-DLA-609-1
- DEBIAN-DSA-3607
- NVD-CVE-2016-4470

NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.