CVE

Id
87652  
CVE No.
CVE-2016-10147  
Status
Candidate  
Description
crypto/mcryptd.c in the Linux kernel before 4.8.15 allows local users to cause a denial of service (NULL pointer dereference and system crash) by using an AF_ALG socket with an incompatible algorithm, as demonstrated by mcryptd(md5).  
Phase
Assigned (20170118)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
764544 87652 CVE-2016-10147 MLIST:[linux-crypto] 20161202 Crash in crypto mcryptd  View
764545 87652 CVE-2016-10147 URL:http://marc.info/?l=linux-crypto-vger&m=148063683310477&w=2  View
764546 87652 CVE-2016-10147 MLIST:[oss-security] 20170117 CVE request -- linux kernel: crash by spawning mcrypt(alg) with incompatible algorithm  View
764547 87652 CVE-2016-10147 URL:http://www.openwall.com/lists/oss-security/2017/01/17/13  View
764548 87652 CVE-2016-10147 CONFIRM:http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=48a992727d82cb7db076fa15d372178743b1f4cd  View
764549 87652 CVE-2016-10147 CONFIRM:http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.15  View
764550 87652 CVE-2016-10147 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1404200  View
764551 87652 CVE-2016-10147 CONFIRM:https://github.com/torvalds/linux/commit/48a992727d82cb7db076fa15d372178743b1f4cd  View
764552 87652 CVE-2016-10147 BID:95677  View

Related JVN