| ID |
CVE-2015-8830
|
| Summary |
Integer overflow in the aio_setup_single_vector function in fs/aio.c in the Linux kernel 4.0 allows local users to cause a denial of service or possibly have unspecified other impact via a large AIO iovec. NOTE: this vulnerability exists because of a CVE-2012-6701 regression. <a href="http://cwe.mitre.org/data/definitions/190.html">CWE-190: Integer Overflow or Wraparound</a> |
| References |
|
| Vulnerable Configurations |
|
| CVSS |
| Base: | 7.2 (as of 31-10-2018 - 10:29) |
| Impact: | |
| Exploitability: | |
|
| CWE |
NVD-CWE-Other |
| CAPEC |
|
| Access |
| Vector | Complexity | Authentication |
| LOCAL |
LOW |
NONE |
|
| Impact |
| Confidentiality | Integrity | Availability |
| COMPLETE |
COMPLETE |
COMPLETE |
|
| cvss-vector
via4
|
AV:L/AC:L/Au:N/C:C/I:C/A:C
|
| redhat
via4
|
| advisories | | | rpms | - kernel-0:2.6.32-754.el6
- kernel-abi-whitelists-0:2.6.32-754.el6
- kernel-bootwrapper-0:2.6.32-754.el6
- kernel-debug-0:2.6.32-754.el6
- kernel-debug-debuginfo-0:2.6.32-754.el6
- kernel-debug-devel-0:2.6.32-754.el6
- kernel-debuginfo-0:2.6.32-754.el6
- kernel-debuginfo-common-i686-0:2.6.32-754.el6
- kernel-debuginfo-common-ppc64-0:2.6.32-754.el6
- kernel-debuginfo-common-s390x-0:2.6.32-754.el6
- kernel-debuginfo-common-x86_64-0:2.6.32-754.el6
- kernel-devel-0:2.6.32-754.el6
- kernel-doc-0:2.6.32-754.el6
- kernel-firmware-0:2.6.32-754.el6
- kernel-headers-0:2.6.32-754.el6
- kernel-kdump-0:2.6.32-754.el6
- kernel-kdump-debuginfo-0:2.6.32-754.el6
- kernel-kdump-devel-0:2.6.32-754.el6
- perf-0:2.6.32-754.el6
- perf-debuginfo-0:2.6.32-754.el6
- python-perf-0:2.6.32-754.el6
- python-perf-debuginfo-0:2.6.32-754.el6
- bpftool-0:3.10.0-957.el7
- kernel-0:3.10.0-957.el7
- kernel-abi-whitelists-0:3.10.0-957.el7
- kernel-bootwrapper-0:3.10.0-957.el7
- kernel-debug-0:3.10.0-957.el7
- kernel-debug-debuginfo-0:3.10.0-957.el7
- kernel-debug-devel-0:3.10.0-957.el7
- kernel-debuginfo-0:3.10.0-957.el7
- kernel-debuginfo-common-ppc64-0:3.10.0-957.el7
- kernel-debuginfo-common-ppc64le-0:3.10.0-957.el7
- kernel-debuginfo-common-s390x-0:3.10.0-957.el7
- kernel-debuginfo-common-x86_64-0:3.10.0-957.el7
- kernel-devel-0:3.10.0-957.el7
- kernel-doc-0:3.10.0-957.el7
- kernel-headers-0:3.10.0-957.el7
- kernel-kdump-0:3.10.0-957.el7
- kernel-kdump-debuginfo-0:3.10.0-957.el7
- kernel-kdump-devel-0:3.10.0-957.el7
- kernel-tools-0:3.10.0-957.el7
- kernel-tools-debuginfo-0:3.10.0-957.el7
- kernel-tools-libs-0:3.10.0-957.el7
- kernel-tools-libs-devel-0:3.10.0-957.el7
- perf-0:3.10.0-957.el7
- perf-debuginfo-0:3.10.0-957.el7
- python-perf-0:3.10.0-957.el7
- python-perf-debuginfo-0:3.10.0-957.el7
- kernel-rt-0:3.10.0-957.rt56.910.el7
- kernel-rt-debug-0:3.10.0-957.rt56.910.el7
- kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7
- kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7
- kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7
- kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7
- kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7
- kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7
- kernel-rt-devel-0:3.10.0-957.rt56.910.el7
- kernel-rt-doc-0:3.10.0-957.rt56.910.el7
- kernel-rt-kvm-0:3.10.0-957.rt56.910.el7
- kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7
- kernel-rt-trace-0:3.10.0-957.rt56.910.el7
- kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7
- kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7
- kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7
- kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7
|
|
| refmap
via4
|
| confirm | | | debian | DSA-3503 | | mlist | [oss-security] 20160302 Re: CVE Request: Linux: aio write triggers integer overflow in some network protocols | | ubuntu | - USN-2968-1
- USN-2968-2
- USN-2969-1
- USN-2970-1
|
|
| Last major update |
31-10-2018 - 10:29 |
| Published |
02-05-2016 - 10:59 |
| Last modified |
31-10-2018 - 10:29 |
