CVE-2015-7872

{"id": "CVE-2015-7872", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 2.1, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:P", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2015-11-16T11:59:10.963", "references": [{"url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ce1fad2740c648a4340f6f6c391a8a83769d2e8c", "source": "secalert@redhat.com"}, {"url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f05819df10d7b09f6d1eb6f8534a8f68e5a4fe61", "tags": ["Vendor Advisory"], "source": "secalert@redhat.com"}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00035.html", "source": "secalert@redhat.com"}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00005.html", "source": "secalert@redhat.com"}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00018.html", "source": "secalert@redhat.com"}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00026.html", "source": "secalert@redhat.com"}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00031.html", "source": "secalert@redhat.com"}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00007.html", "source": "secalert@redhat.com"}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00009.html", "source": "secalert@redhat.com"}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00013.html", "source": "secalert@redhat.com"}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00017.html", "source": "secalert@redhat.com"}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00018.html", "source": "secalert@redhat.com"}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00019.html", "source": "secalert@redhat.com"}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00020.html", "source": "secalert@redhat.com"}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00021.html", "source": "secalert@redhat.com"}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00022.html", "source": "secalert@redhat.com"}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00034.html", "source": "secalert@redhat.com"}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html", "source": "secalert@redhat.com"}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html", "source": "secalert@redhat.com"}, {"url": "http://marc.info/?l=bugtraq&m=145975164525836&w=2", "source": "secalert@redhat.com"}, {"url": "http://rhn.redhat.com/errata/RHSA-2015-2636.html", "source": "secalert@redhat.com"}, {"url": "http://rhn.redhat.com/errata/RHSA-2016-0185.html", "source": "secalert@redhat.com"}, {"url": "http://rhn.redhat.com/errata/RHSA-2016-0212.html", "source": "secalert@redhat.com"}, {"url": "http://rhn.redhat.com/errata/RHSA-2016-0224.html", "source": "secalert@redhat.com"}, {"url": "http://www.debian.org/security/2015/dsa-3396", "source": "secalert@redhat.com"}, {"url": "http://www.openwall.com/lists/oss-security/2015/10/20/6", "source": "secalert@redhat.com"}, {"url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html", "source": "secalert@redhat.com"}, {"url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html", "source": "secalert@redhat.com"}, {"url": "http://www.securityfocus.com/bid/77544", "source": "secalert@redhat.com"}, {"url": "http://www.securitytracker.com/id/1034472", "source": "secalert@redhat.com"}, {"url": "http://www.ubuntu.com/usn/USN-2823-1", "source": "secalert@redhat.com"}, {"url": "http://www.ubuntu.com/usn/USN-2824-1", "source": "secalert@redhat.com"}, {"url": "http://www.ubuntu.com/usn/USN-2826-1", "source": "secalert@redhat.com"}, {"url": "http://www.ubuntu.com/usn/USN-2829-1", "source": "secalert@redhat.com"}, {"url": "http://www.ubuntu.com/usn/USN-2829-2", "source": "secalert@redhat.com"}, {"url": "http://www.ubuntu.com/usn/USN-2840-1", "source": "secalert@redhat.com"}, {"url": "http://www.ubuntu.com/usn/USN-2840-2", "source": "secalert@redhat.com"}, {"url": "http://www.ubuntu.com/usn/USN-2843-1", "source": "secalert@redhat.com"}, {"url": "http://www.ubuntu.com/usn/USN-2843-2", "source": "secalert@redhat.com"}, {"url": "http://www.ubuntu.com/usn/USN-2843-3", "source": "secalert@redhat.com"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1272172", "source": "secalert@redhat.com"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1272371", "source": "secalert@redhat.com"}, {"url": "https://github.com/torvalds/linux/commit/ce1fad2740c648a4340f6f6c391a8a83769d2e8c", "tags": ["Vendor Advisory"], "source": "secalert@redhat.com"}, {"url": "https://github.com/torvalds/linux/commit/f05819df10d7b09f6d1eb6f8534a8f68e5a4fe61", "source": "secalert@redhat.com"}, {"url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05068676", "source": "secalert@redhat.com"}, {"url": "https://source.android.com/security/bulletin/2016-12-01.html", "source": "secalert@redhat.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "The key_gc_unused_keys function in security/keys/gc.c in the Linux kernel through 4.2.6 allows local users to cause a denial of service (OOPS) via crafted keyctl commands."}, {"lang": "es", "value": "La funci\u00f3n key_gc_unused_keys en security/keys/gc.c en el kernel Linux hasta la versi\u00f3n 4.2.6 permite a usuarios locales causar una denegaci\u00f3n de servicio (OOPS) a trav\u00e9s de comandos keyctl manipulados."}], "lastModified": "2023-02-13T00:55:06.777", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C97E16E6-9CAB-40D4-A166-72CA39EE9D48", "versionEndIncluding": "4.2.6"}], "operator": "OR"}]}], "sourceIdentifier": "secalert@redhat.com"}