PT-2015-6787
CVE-2015-5156
·
تاريخ النشر
2015-08-06
·
تاريخ التحديث
2023-02-12
الوصف من
CVSS 2.0
6.1
متوسطةالمقاييسAV:A/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 4.2
Description
The issue is related to the virtnet probe function in the Linux kernel, which fails to properly allocate memory when supporting the FRAGLIST feature. This allows guest OS users to cause a denial of service by sending a crafted sequence of fragmented packets, resulting in a buffer overflow and memory corruption.
Recommendations
For Linux kernel versions prior to 4.2, update to version 4.2 or later to resolve the issue.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾