ID | CVE-2017-15274 | ||||||
Sažetak | security/keys/keyctl.c in the Linux kernel before 4.11.5 does not consider the case of a NULL payload in conjunction with a nonzero length value, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) via a crafted add_key or keyctl system call, a different vulnerability than CVE-2017-12192. | ||||||
Reference |
|
||||||
CVSS |
|
||||||
Pristup |
|
||||||
Impact |
|
||||||
CVSS vektor | AV:L/AC:L/Au:N/C:N/I:N/A:C | ||||||
Zadnje važnije ažuriranje | 16-03-2018 - 01:29 | ||||||
Objavljeno | 12-10-2017 - 00:29 |