Buffer overflow in Linux Kernel
CVE-2015-1333
Memory leak in the __key_link_end function in security/keys/keyring.c in the Linux kernel before 4.1.4 allows local users to cause a denial of service (memory consumption) via many add_key system calls that refer to existing keys.
Vulnerability class: Buffer Overflow
EPSS: 0.005 (38.7th percentile) — read the EPSS interpretation.
Affected products
- Linux Linux_kernel
- N/a — versions n/a
Weakness classification (CWE)
References
- security@ubuntu.com (x_refsource_CONFIRM, Vendor Advisory)
- security@ubuntu.com (x_refsource_UBUNTU, vendor-advisory)
- security@ubuntu.com (x_refsource_UBUNTU, vendor-advisory)
- security@ubuntu.com (x_refsource_REDHAT, vendor-advisory)
- security@ubuntu.com (x_refsource_CONFIRM)
- security@ubuntu.com (x_refsource_UBUNTU, vendor-advisory)
- security@ubuntu.com (x_refsource_CONFIRM)
- security@ubuntu.com (vendor-advisory, x_refsource_DEBIAN)
- security@ubuntu.com (x_refsource_REDHAT, vendor-advisory)
- security@ubuntu.com (x_refsource_CONFIRM)