CVE

Id
82983  
CVE No.
CVE-2015-5706  
Status
Candidate  
Description
Use-after-free vulnerability in the path_openat function in fs/namei.c in the Linux kernel 3.x and 4.x before 4.0.4 allows local users to cause a denial of service or possibly have unspecified other impact via O_TMPFILE filesystem operations that leverage a duplicate cleanup operation.  
Phase
Assigned (20150802)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
741620 82983 CVE-2015-5706 MLIST:[oss-security] 20150801 CVE request: Use-after-free in path lookup in Linux 3.11-4.0 inclusive  View
741621 82983 CVE-2015-5706 URL:http://www.openwall.com/lists/oss-security/2015/08/01/5  View
741622 82983 CVE-2015-5706 MISC:http://twitter.com/grsecurity/statuses/597127122910490624  View
741623 82983 CVE-2015-5706 CONFIRM:http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f15133df088ecadd141ea1907f2c96df67c729f0  View
741624 82983 CVE-2015-5706 CONFIRM:http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.0.4  View
741625 82983 CVE-2015-5706 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1250047  View
741626 82983 CVE-2015-5706 CONFIRM:https://github.com/torvalds/linux/commit/f15133df088ecadd141ea1907f2c96df67c729f0  View
741627 82983 CVE-2015-5706 CONFIRM:https://source.android.com/security/bulletin/2017-01-01.html  View
741628 82983 CVE-2015-5706 DEBIAN:DSA-3329  View
741629 82983 CVE-2015-5706 URL:http://www.debian.org/security/2015/dsa-3329  View
741630 82983 CVE-2015-5706 UBUNTU:USN-2680-1  View
741631 82983 CVE-2015-5706 URL:http://www.ubuntu.com/usn/USN-2680-1  View
741632 82983 CVE-2015-5706 UBUNTU:USN-2681-1  View
741633 82983 CVE-2015-5706 URL:http://www.ubuntu.com/usn/USN-2681-1  View
741634 82983 CVE-2015-5706 BID:76142  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
8928 JVNDB-2015-004248 Apple iOS および OS X の ImageIO における任意のコードを実行される脆弱性 Apple iOS および OS X の ImageIO には、任意のコードを実行される、またはサービス運用妨害 (メモリ破損およびアプリケーションクラッシュ) 状態にされる脆弱性が存在します。 CVE-2015-5758 82983 6.8 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-004248.html  View