CVE Database
/

CVE-2016-2550

Back to search

CVE-2016-2550

Published: Apr 27, 2016

Modified: Aug 5, 2024

PUBLISHED

Description

The Linux kernel before 4.5 allows local users to bypass file-descriptor limits and cause a denial of service (memory consumption) by leveraging incorrect tracking of descriptor ownership and sending each descriptor over a UNIX socket before closing it. NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-4312.

VendorProductVersions

n/a

n/a

affected
n/a

References

USN-2949-1
vendor-advisory
x_refsource_UBUNTU
DSA-3503
vendor-advisory
x_refsource_DEBIAN
USN-2947-3
vendor-advisory
x_refsource_UBUNTU
USN-2947-2
vendor-advisory
x_refsource_UBUNTU
USN-2947-1
vendor-advisory
x_refsource_UBUNTU
USN-2946-2
vendor-advisory
x_refsource_UBUNTU
USN-2948-1
vendor-advisory
x_refsource_UBUNTU
USN-2946-1
vendor-advisory
x_refsource_UBUNTU
USN-2948-2
vendor-advisory
x_refsource_UBUNTU

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now