Oval Definition:	oval:org.mitre.oval:def:9325
Revision Date: 2013-04-29 Version: 11 Title: The sys_add_key function in the keyring code in Linux kernel 2.6.16.1 and 2.6.17-rc1, and possibly earlier versions, allows local users to cause a denial of service (OOPS) via keyctl requests that add a key to a user key instead of a keyring key, which causes an invalid dereference in the __keyring_search_one function. Description: The sys_add_key function in the keyring code in Linux kernel 2.6.16.1 and 2.6.17-rc1, and possibly earlier versions, allows local users to cause a denial of service (OOPS) via keyctl requests that add a key to a user key instead of a keyring key, which causes an invalid dereference in the __keyring_search_one function. Family: unix Class: vulnerability Status: ACCEPTED Reference(s): CVE-2006-1522 Platform(s): CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 4 Product(s): Definition Synopsis RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 OR CentOS Linux 4.x OR Oracle Linux 4.x AND Configuration section kernel-hugemem is earlier than 0:2.6.9-34.0.1.EL OR kernel-hugemem-devel is earlier than 0:2.6.9-34.0.1.EL OR kernel-smp-devel is earlier than 0:2.6.9-34.0.1.EL OR kernel-largesmp-devel is earlier than 0:2.6.9-34.0.1.EL OR kernel is earlier than 0:2.6.9-34.0.1.EL OR kernel-devel is earlier than 0:2.6.9-34.0.1.EL OR kernel-doc is earlier than 0:2.6.9-34.0.1.EL OR kernel-largesmp is earlier than 0:2.6.9-34.0.1.EL OR kernel-smp is earlier than 0:2.6.9-34.0.1.EL
BACK