SB2017071002 - Denial of service in Linux Kernel

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2017071002

SB2017071002 - Denial of service in Linux Kernel

Published: July 10, 2017

Security Bulletin ID SB2017071002
Severity
Low
Patch available
YES
Number of vulnerabilities 2
Exploitation vector Local access
Highest impact Denial of service

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 2 secuirty vulnerabilities.


1) Improper input validation (CVE-ID: CVE-2018-10087)

The vulnerability allows a local attacker to cause DoS condition on the target system.

The weakness exists in the kernel_wait4 function in kernel/exit.c due to improper validation of the INT_MIN parameter. A local attacker can trigger an error condition and cause the service to crash.


2) Improper input validation (CVE-ID: CVE-2018-10124)

The vulnerability allows a local attacker to cause DoS condition on the target system.

The weakness exists in the kill_something_info function in kernel/signal.c due to  improper validation of input. A local attacker can run a program designed to send malicious requests and cause the service to crash.


Remediation

Install update from vendor's website.

References