Improper input validation in Linux Kernel

CVE-2011-3619

The apparmor_setprocattr function in security/apparmor/lsm.c in the Linux kernel before 3.0 does not properly handle invalid parameters, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact by writing to a /proc/#####/attr/current file.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.005 (38.3th percentile) — read the EPSS interpretation.