NVD

Id
28944  
Name
CVE-2015-8953  
Description
fs/overlayfs/copy_up.c in the Linux kernel before 4.2.6 uses an incorrect cleanup code path, which allows local users to cause a denial of service (dentry reference leak) via filesystem operations on a large file in a lower overlayfs layer.  
Reject
 
CVSS Version
2  
CVSS Score
4.9  
Severity
Medium  
CVSS Base Score
4.9  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-19  
Published
2016-10-16  
Modified Date
2016-11-28  
Seq
2015-8953  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
152582 28944 CVE-2015-8953 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ab79efab0a0ba01a74df782eb7fa44b044dae8b5  View
152583 28944 CVE-2015-8953 http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.2.6  View
152584 28944 CVE-2015-8953 [oss-security] 20160823 cve request: overlayfs: Fix dentry reference leak  View
152585 28944 CVE-2015-8953 92611  View
152586 28944 CVE-2015-8953 https://bugzilla.redhat.com/show_bug.cgi?id=1367814  View
152587 28944 CVE-2015-8953 https://github.com/torvalds/linux/commit/ab79efab0a0ba01a74df782eb7fa44b044dae8b5  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
11968 JVNDB-2015-007289 Linux Kernel の fs/overlayfs/copy_up.c におけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の fs/overlayfs/copy_up.c は、不正な cleanup コードパスを使用するため、サービス運用妨害 (dentry 参照リーク) 状態にされる脆弱性が存在します。 CVE-2015-8953 86178 CVE-2015-8953 28944 4.9 5.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-007289.html 2015-11-09 2016-10-20 View