The cgroup offline implementation in the Linux kernel through 4.8.11 mishandles certain drain operations, which allows local users to cause a denial of service (system hang) by leveraging access to a container environment for executing a crafted application, as demonstrated by trinity.
http://www.debian.org/security/2017/dsa-3791
http://www.openwall.com/lists/oss-security/2016/11/05/4
http://www.securityfocus.com/bid/94129
https://bugzilla.redhat.com/show_bug.cgi?id=1392439
https://github.com/torvalds/linux/commit/93362fa47fe98b62e4a34ab408c4a418432e7939
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03802en_us
Source: MITRE
Published: 2016-11-28
Updated: 2018-05-10
Type: CWE-20
Base Score: 4.9
Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C
Impact Score: 6.9
Exploitability Score: 3.9
Severity: MEDIUM
Base Score: 5.5
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Impact Score: 3.6
Exploitability Score: 1.8
Severity: MEDIUM
OR
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions up to 4.8.11 (inclusive)
ID | Name | Product | Family | Severity |
---|---|---|---|---|
124978 | EulerOS Virtualization for ARM 64 3.0.1.0 : kernel (EulerOS-SA-2019-1525) | Nessus | Huawei Local Security Checks | high |
109158 | OracleVM 3.4 : Unbreakable / etc (OVMSA-2018-0035) (Dirty COW) (Meltdown) (Spectre) | Nessus | OracleVM Local Security Checks | high |
109156 | Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4071) (Dirty COW) (Meltdown) (Spectre) | Nessus | Oracle Linux Local Security Checks | high |
105248 | OracleVM 3.4 : Unbreakable / etc (OVMSA-2017-0174) (BlueBorne) (Dirty COW) (Stack Clash) | Nessus | OracleVM Local Security Checks | high |
105247 | Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3659) (BlueBorne) (Dirty COW) (Stack Clash) | Nessus | Oracle Linux Local Security Checks | high |
105146 | OracleVM 3.4 : Unbreakable / etc (OVMSA-2017-0172) (Dirty COW) | Nessus | OracleVM Local Security Checks | high |
105143 | Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3651) (Dirty COW) | Nessus | Oracle Linux Local Security Checks | high |
104619 | OracleVM 3.4 : Unbreakable / etc (OVMSA-2017-0169) | Nessus | OracleVM Local Security Checks | medium |
104565 | Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3640) | Nessus | Oracle Linux Local Security Checks | medium |
103326 | Ubuntu 14.04 LTS : linux vulnerabilities (USN-3422-1) (BlueBorne) | Nessus | Ubuntu Local Security Checks | high |
101929 | Ubuntu 16.04 LTS : linux-hwe vulnerabilities (USN-3361-1) | Nessus | Ubuntu Local Security Checks | critical |
100320 | SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2017:1360-1) | Nessus | SuSE Local Security Checks | critical |
100023 | SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2017:1183-1) | Nessus | SuSE Local Security Checks | high |
99156 | openSUSE Security Update : the Linux Kernel (openSUSE-2017-418) | Nessus | SuSE Local Security Checks | high |
97357 | Debian DSA-3791-1 : linux - security update | Nessus | Debian Local Security Checks | high |
97323 | Ubuntu 14.04 LTS : linux-lts-xenial vulnerabilities (USN-3208-2) | Nessus | Ubuntu Local Security Checks | high |
97322 | Ubuntu 16.04 LTS : linux, linux-snapdragon vulnerabilities (USN-3208-1) | Nessus | Ubuntu Local Security Checks | high |