Total vulnerabilities in the database
The key_reject_and_link function in security/keys/key.c in the Linux kernel through 4.6.3 does not ensure that a certain data structure is initialized, which allows local users to cause a denial of service (system crash) via vectors involving a crafted keyctl request2 command.
| Software | From | Fixed in |
|---|---|---|
| oracle / vm_server | 3.4 | 3.4.x |
| oracle / vm_server | 3.3 | 3.3.x |
| oracle / linux | 5.0 | 5.0.x |
| oracle / linux | 6 | 6.x |
| oracle / linux | 7 | 7.x |
| linux / linux_kernel | - | 4.6.3.x |
| novell / suse_linux_enterprise_real_time_extension | 12.0-sp1 | 12.0-sp1.x |
| redhat / enterprise_linux_desktop | 7.0 | 7.0.x |
| redhat / enterprise_linux_server_aus | 7.2 | 7.2.x |
| redhat / enterprise_linux_workstation | 7.0 | 7.0.x |
| redhat / enterprise_linux | 6.0 | 6.0.x |
| redhat / enterprise_linux_server | 7.0 | 7.0.x |
| redhat / enterprise_linux_hpc_node | 7.0 | 7.0.x |
| redhat / enterprise_linux_server_eus | 7.2 | 7.2.x |
| redhat / enterprise_linux_hpc_node_eus | 7.0 | 7.0.x |
| redhat / enterprise_linux_for_real_time | 7.0 | 7.0.x |
| redhat / enterprise_mrg | 2.0 | 2.0.x |