CVE-2016-8650

 

Published at: - 28-11-2016 04:59

Last modified: - 26-10-2022 01:44

Total changes: - 3

Description

The mpi_powm function in lib/mpi/mpi-pow.c in the Linux kernel through 4.8.11 does not ensure that memory is allocated for limb data, which allows local users to cause a denial of service (stack memory corruption and panic) via an add_key system call for an RSA key with a zero exponent.

Common Vulnerability Scoring System (CVSS)

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

 

Verification logic

 

Reference

• https://github.com/torvalds/linux/commit/f5527fffff3f002b0a6b376163613b82f69de073
• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f5527fffff3f002b0a6b376163613b82f69de073
• [oss-security] 20161125 Linux kernel: CVE-2016-8650 : Local denial of service with in key subsystem-Mailing List, Third Party Advisory
• 20161115 OS-S 2016-21 - Local DoS: Linux Kernel Nullpointer Dereference via keyctl-Mailing List
• https://bugzilla.redhat.com/show_bug.cgi?id=1395187
• 94532-
• https://source.android.com/security/bulletin/2017-03-01.html
• 1037968-
• RHSA-2017:0933-
• RHSA-2017:0932-
• RHSA-2017:0931-
• RHSA-2018:1854-

 

Keywords

NVD

 

CVE-2016-8650

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures