Total vulnerabilities in the database
The sock_setsockopt function in net/core/sock.c in the Linux kernel before 3.5.7 does not ensure that a keepalive action is associated with a stream socket, which allows local users to cause a denial of service (system crash) by leveraging the ability to create a raw socket.
| Software | From | Fixed in |
|---|---|---|
| linux / linux_kernel | 3.5.2 | 3.5.2.x |
| linux / linux_kernel | - | 3.5.6.x |
| linux / linux_kernel | 3.5.5 | 3.5.5.x |
| linux / linux_kernel | 3.5.3 | 3.5.3.x |
| linux / linux_kernel | 3.5.4 | 3.5.4.x |
| linux / linux_kernel | 3.5.1 | 3.5.1.x |
| novell / suse_linux_enterprise_server | 11.0-sp1 | 11.0-sp1.x |
| novell / suse_linux_enterprise_server | 10.0-sp4 | 10.0-sp4.x |