CVE-2016-2847

CWE-399CWE-400 — Uncontrolled Resource Consumption18 documents8 sources
Severity
6.2MEDIUM
EPSS
0.1%
top 77.83%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
9
Linux Linux KernelNovell Suse Linux Enterprise DebuginfoNovell Suse Linux Enterprise Desktop+6 more
Timeline
PublishedApr 27
Latest updateMay 14

Description

fs/pipe.c in the Linux kernel before 4.5 does not limit the amount of unread data in pipes, which allows local users to cause a denial of service (memory consumption) by creating many pipes with non-default sizes.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 2.5 | Impact: 3.6

Affected Packages10 packages

▶Debianlinux< 4.3.5-1+3

Patches

Patch: git.kernel.org ↗Patch: www.openwall.com ↗Patch: git.kernel.org ↗

🔴Vulnerability Details

3
GHSA
GHSA-g874-pwj2-p4wh: fs/pipe↗2022-05-14
▶
CVEList
CVE-2016-2847: fs/pipe↗2016-04-27
▶
OSV
CVE-2016-2847: fs/pipe↗2016-04-27
▶

📋Vendor Advisories

12
Ubuntu
Linux kernel vulnerabilities↗2016-05-09
▶
Ubuntu
Linux kernel (OMAP4) vulnerabilities↗2016-05-09
▶
Ubuntu
Linux kernel (Xenial HWE) vulnerabilities↗2016-05-06
▶
Ubuntu
Linux kernel (Trusty HWE) vulnerabilities↗2016-04-06
▶
Ubuntu
Linux kernel (Wily HWE) vulnerabilities↗2016-04-06
▶

💬Community

2
Bugzilla
CVE-2016-2847 kernel: pipe: limit the per-user amount of pages allocated in pipes↗2016-03-01
▶
Bugzilla
CVE-2016-2847 kernel: pipe: limit the per-user amount of pages allocated in pipes [fedora-all]↗2016-03-01
▶