NVD

Id
18752  
Name
CVE-2016-2550  
Description
The Linux kernel before 4.5 allows local users to bypass file-descriptor limits and cause a denial of service (memory consumption) by leveraging incorrect tracking of descriptor ownership and sending each descriptor over a UNIX socket before closing it. NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-4312.  
Reject
 
CVSS Version
2  
CVSS Score
4.9  
Severity
Medium  
CVSS Base Score
4.9  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-19  
Published
2016-04-27  
Modified Date
2016-12-02  
Seq
2016-2550  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
103687 18752 CVE-2016-2550 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=415e3d3e90ce9e18727e8843ae343eda5a58fad6  View
103688 18752 CVE-2016-2550 DSA-3503  View
103689 18752 CVE-2016-2550 [oss-security] 20160223 CVE Request: Linux: unix: correctly track in-flight fds in sending process user_struct sockets  View
103690 18752 CVE-2016-2550 USN-2946-1  View
103691 18752 CVE-2016-2550 USN-2946-2  View
103692 18752 CVE-2016-2550 USN-2947-1  View
103693 18752 CVE-2016-2550 USN-2947-2  View
103694 18752 CVE-2016-2550 USN-2947-3  View
103695 18752 CVE-2016-2550 USN-2948-1  View
103696 18752 CVE-2016-2550 USN-2948-2  View
103697 18752 CVE-2016-2550 USN-2949-1  View
103698 18752 CVE-2016-2550 https://bugzilla.redhat.com/show_bug.cgi?id=1311517  View
103699 18752 CVE-2016-2550 https://github.com/torvalds/linux/commit/415e3d3e90ce9e18727e8843ae343eda5a58fad6  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
1717 JVNDB-2016-002490 Linux Kernel におけるファイル記述子の制限を回避される脆弱性 Linux Kernel には、ファイル記述子の制限を回避され、サービス運用妨害 (メモリ消費) 状態にされる脆弱性が存在します。 CVE-2016-2550 89056 CVE-2016-2550 18752 4.9 5.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-002490.html 2016-02-03 2016-05-11 View