CVE-2015-8970
CVSS v3.0
5.5 (Medium)
CVSS v2.0
4.9 (Medium)
EPSS
0.04 % (5th)
Affected Products
1
Advisories
6
crypto/algif_skcipher.c in the Linux kernel before 4.4.2 does not verify that a setkey operation has been performed on an AF_ALG socket before an accept system call is processed, which allows local users to cause a denial of service (NULL pointer dereference and system crash) via a crafted application that does not supply a key, related to the lrw_crypt function in crypto/lrw.c.
Weaknesses
- CWE-476
- NULL Pointer Dereference
- CVE Status
- PUBLISHED
- CNA
- Red Hat, Inc.
- Published Date
-
2016-11-28 03:59:02
(7 years ago) - Updated Date
-
2023-02-13 00:55:21
(19 months ago)
Affected Products
Loading...
Loading...
Configuration #1
|
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...