Open mend-bolt-for-github[bot] opened 1 year ago
The rngapi_reset function in crypto/rng.c in the Linux kernel before 4.2 allows attackers to cause a denial of service (NULL pointer dereference).
Publish Date: 2017-11-30
URL: CVE-2017-15116
Base Score Metrics: - Exploitability Metrics: - Attack Vector: Local - Attack Complexity: Low - Privileges Required: Low - User Interaction: None - Scope: Unchanged - Impact Metrics: - Confidentiality Impact: None - Integrity Impact: None - Availability Impact: High
Type: Upgrade version
Origin: https://nvd.nist.gov/vuln/detail/CVE-2017-15116
Release Date: 2017-11-30
Fix Resolution: 4.2
Step up your Open Source Security Game with Mend here
CVE-2017-15116 - Medium Severity Vulnerability
Vulnerable Libraries - linuxlinux-3.0.40, linux-stable-rtv3.8.6, linux-stable-rtv3.8.6, linux-stable-rtv3.8.6
Vulnerability Details
The rngapi_reset function in crypto/rng.c in the Linux kernel before 4.2 allows attackers to cause a denial of service (NULL pointer dereference).
Publish Date: 2017-11-30
URL: CVE-2017-15116
CVSS 3 Score Details (5.5)
Base Score Metrics: - Exploitability Metrics: - Attack Vector: Local - Attack Complexity: Low - Privileges Required: Low - User Interaction: None - Scope: Unchanged - Impact Metrics: - Confidentiality Impact: None - Integrity Impact: None - Availability Impact: High
For more information on CVSS3 Scores, click here.Suggested Fix
Type: Upgrade version
Origin: https://nvd.nist.gov/vuln/detail/CVE-2017-15116
Release Date: 2017-11-30
Fix Resolution: 4.2
Step up your Open Source Security Game with Mend here