NVD

Id
28350  
Name
CVE-2015-7990  
Description
Race condition in the rds_sendmsg function in net/rds/sendmsg.c in the Linux kernel before 4.3.3 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by using a socket that was not properly bound. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-6937.  
Reject
 
CVSS Version
2  
CVSS Score
5.9  
Severity
Medium  
CVSS Base Score
5.9  
CVSS Impact Subscore
8.5  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:P/I:P/A:C)  
Pub Date
2017-01-19  
Published
2015-12-28  
Modified Date
2016-12-07  
Seq
2015-7990  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
148998 28350 CVE-2015-7990 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8c7188b23474cca017b3ef354c4a58456f68303a  View
148999 28350 CVE-2015-7990 SUSE-SU-2015:2108  View
149000 28350 CVE-2015-7990 SUSE-SU-2015:2194  View
149001 28350 CVE-2015-7990 SUSE-SU-2015:2292  View
149002 28350 CVE-2015-7990 SUSE-SU-2015:2339  View
149003 28350 CVE-2015-7990 SUSE-SU-2015:2350  View
149004 28350 CVE-2015-7990 SUSE-SU-2016:0335  View
149005 28350 CVE-2015-7990 SUSE-SU-2016:0337  View
149006 28350 CVE-2015-7990 SUSE-SU-2016:0354  View
149007 28350 CVE-2015-7990 SUSE-SU-2016:0380  View
149008 28350 CVE-2015-7990 SUSE-SU-2016:0381  View
149009 28350 CVE-2015-7990 SUSE-SU-2016:0383  View
149010 28350 CVE-2015-7990 SUSE-SU-2016:0384  View
149011 28350 CVE-2015-7990 SUSE-SU-2016:0386  View
149012 28350 CVE-2015-7990 SUSE-SU-2016:0387  View
149013 28350 CVE-2015-7990 SUSE-SU-2016:0434  View
149014 28350 CVE-2015-7990 SUSE-SU-2016:2074  View
149015 28350 CVE-2015-7990 openSUSE-SU-2015:2232  View
149016 28350 CVE-2015-7990 DSA-3396  View
149017 28350 CVE-2015-7990 http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.3.3  View
149018 28350 CVE-2015-7990 [oss-security] 20151027 Re: CVE-2015-6937 - Linux kernel - NULL pointer dereference in net/rds/connection.c  View
149019 28350 CVE-2015-7990 77340  View
149020 28350 CVE-2015-7990 1034453  View
149021 28350 CVE-2015-7990 USN-2886-1  View
149022 28350 CVE-2015-7990 USN-2887-1  View
149023 28350 CVE-2015-7990 USN-2887-2  View
149024 28350 CVE-2015-7990 USN-2888-1  View
149025 28350 CVE-2015-7990 USN-2889-1  View
149026 28350 CVE-2015-7990 USN-2889-2  View
149027 28350 CVE-2015-7990 USN-2890-1  View
149028 28350 CVE-2015-7990 USN-2890-2  View
149029 28350 CVE-2015-7990 USN-2890-3  View
149030 28350 CVE-2015-7990 https://bugzilla.redhat.com/show_bug.cgi?id=1276437  View
149031 28350 CVE-2015-7990 https://bugzilla.suse.com/show_bug.cgi?id=952384  View
149032 28350 CVE-2015-7990 https://github.com/torvalds/linux/commit/8c7188b23474cca017b3ef354c4a58456f68303a  View
149033 28350 CVE-2015-7990 [linux-kernel] 20151016 [PATCH] RDS: fix race condition when sending a message on unbound socket.  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
11246 JVNDB-2015-006566 Linux Kernel の net/rds/sendmsg.c の rds_sendmsg 機能におけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の net/rds/sendmsg.c の rds_sendmsg 機能には、競合状態により、サービス運用妨害 (NULL ポインタデリファレンスおよびシステムクラッシュ) 状態にされるなど、不特定の影響を受ける脆弱性が存在します。 CVE-2015-7990 85215 CVE-2015-7990 28350 5.9 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-006566.html 2015-12-14 2016-01-05 View