CVE-2015-8543 in Kernel
要約 (英語)
The networking implementation in the Linux kernel through 4.3.3, as used in Android and other products, does not validate protocol identifiers for certain protocol families, which allows local users to cause a denial of service (NULL function pointer dereference and system crash) or possibly gain privileges by leveraging CLONE_NEWUSER support to execute a crafted SOCK_RAW application.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
予約する
2015年12月11日
公開
2015年12月28日
ステータス
確認済み
エントリ
VulDB provides additional information and datapoints for this CVE:
| 識別子 | 脆弱性 | CWE | 悪用可 | 対策 | CVE |
|---|---|---|---|---|---|
| 79928 | Linux Kernel Networking サービス拒否 | 476 | 未定義 | 公式な修正 | CVE-2015-8543 |