PT-2004-2051 · Nsa · Selinux
CVSS v2.0
1.2
Baixa
| Vetor | AV:L/AC:H/Au:N/C:N/I:N/A:P |
Name of the Vulnerable Software and Affected Versions:
SELinux versions 2.6.x through 2.6.9
Description:
A race condition exists in the handling of SOCK SEQPACKET unix domain sockets, specifically in the
sock dgram sendmsg function, allowing local users to cause a denial of service by crashing the kernel.Recommendations:
For SELinux versions 2.6.x through 2.6.9, consider restricting access to unix domain sockets to minimize the risk of exploitation until a patch is available.
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Selinux