NVD

Id
28665  
Name
CVE-2015-8539  
Description
The KEYS subsystem in the Linux kernel before 4.4 allows local users to gain privileges or cause a denial of service (BUG) via crafted keyctl commands that negatively instantiate a key, related to security/keys/encrypted-keys/encrypted.c, security/keys/trusted.c, and security/keys/user_defined.c.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2016-02-07  
Modified Date
2016-12-05  
Seq
2015-8539  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
150729 28665 CVE-2015-8539 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=096fe9eaea40a17e125569f9e657e34cdb6d73bd  View
150730 28665 CVE-2015-8539 SUSE-SU-2016:0335  View
150731 28665 CVE-2015-8539 SUSE-SU-2016:0336  View
150732 28665 CVE-2015-8539 SUSE-SU-2016:0337  View
150733 28665 CVE-2015-8539 SUSE-SU-2016:0339  View
150734 28665 CVE-2015-8539 SUSE-SU-2016:0380  View
150735 28665 CVE-2015-8539 SUSE-SU-2016:0381  View
150736 28665 CVE-2015-8539 SUSE-SU-2016:0383  View
150737 28665 CVE-2015-8539 SUSE-SU-2016:0384  View
150738 28665 CVE-2015-8539 SUSE-SU-2016:0386  View
150739 28665 CVE-2015-8539 SUSE-SU-2016:0387  View
150740 28665 CVE-2015-8539 SUSE-SU-2016:0434  View
150741 28665 CVE-2015-8539 SUSE-SU-2016:0911  View
150742 28665 CVE-2015-8539 SUSE-SU-2016:1102  View
150743 28665 CVE-2015-8539 SUSE-SU-2016:1937  View
150744 28665 CVE-2015-8539 SUSE-SU-2016:2074  View
150745 28665 CVE-2015-8539 [oss-security] 20151208 CVE request - Linux kernel - Fix handling of stored error in a negatively instantiated user key  View
150746 28665 CVE-2015-8539 https://bugzilla.redhat.com/show_bug.cgi?id=1284450  View
150747 28665 CVE-2015-8539 https://github.com/torvalds/linux/commit/096fe9eaea40a17e125569f9e657e34cdb6d73bd  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
11602 JVNDB-2015-006922 Linux Kernel の KEYS サブシステムにおける権限を取得される脆弱性 Linux Kernel の KEYS サブシステムには、security/keys/encrypted-keys/encrypted.c、security/keys/trusted.c、および security/keys/user_defined.c に関する処理に不備があるため、権限を取得される、またはサービス運用妨害 (バグ) 状態にされる脆弱性が存在します。 CVE-2015-8539 85764 CVE-2015-8539 28665 7.2 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-006922.html 2015-11-25 2016-03-02 View