CVE-2016-9793 in Linux Kernel
요약 (영어)
The sock_setsockopt function in net/core/sock.c in the Linux kernel before 4.8.14 mishandles negative values of sk_sndbuf and sk_rcvbuf, which allows local users to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact by leveraging the CAP_NET_ADMIN capability for a crafted setsockopt system call with the (1) SO_SNDBUFFORCE or (2) SO_RCVBUFFORCE option.
예약하다
2016. 12. 02.
공개
2016. 12. 28.
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 94701 | Linux Kernel sock.c sock_setsockopt 메모리 손상 | 119 | 개념 증명 | 공식 수정 | CVE-2016-9793 |