CVE-2016-2847

Loading...

General

Score:4.9/10.0
Severity:Low
Category:Resource Management Error

Impact Metrics

Confidentiality:None
Integrity:None
Availability:Complete

Exploitability Metrics

Access Vector:Local
Access Complexity:Low
Authentication:None

Relative vulnerabilities

CVE-2013-2015, CVE-2013-4312, CVE-2013-7446, CVE-2014-9717, CVE-2015-0272, CVE-2015-1805, CVE-2015-3339, CVE-2015-5157, CVE-2015-5307, CVE-2015-6252, CVE-2015-6937, CVE-2015-7509, CVE-2015-7513, CVE-2015-7515, CVE-2015-7550, CVE-2015-7566, CVE-2015-7799, CVE-2015-7833, CVE-2015-7837, CVE-2015-7872, CVE-2015-7990, CVE-2015-8104, CVE-2015-8215, CVE-2015-8374, CVE-2015-8539, CVE-2015-8543, CVE-2015-8550, CVE-2015-8551, CVE-2015-8552, CVE-2015-8569, CVE-2015-8575, CVE-2015-8746, CVE-2015-8767, CVE-2015-8785, CVE-2015-8787, CVE-2015-8812, CVE-2015-8816, CVE-2015-8844, CVE-2015-8845, CVE-2015-8956, CVE-2016-0723, CVE-2016-0728, CVE-2016-0758, CVE-2016-0774, CVE-2016-0821, CVE-2016-1583, CVE-2016-2053, CVE-2016-2069, CVE-2016-2085, CVE-2016-2117, CVE-2016-2143, CVE-2016-2184, CVE-2016-2185, CVE-2016-2186, CVE-2016-2187, CVE-2016-2188, CVE-2016-2383, CVE-2016-2384, CVE-2016-2543, CVE-2016-2544, CVE-2016-2545, CVE-2016-2546, CVE-2016-2547, CVE-2016-2548, CVE-2016-2549, CVE-2016-2550, CVE-2016-2782, CVE-2016-3070, CVE-2016-3134, CVE-2016-3136, CVE-2016-3137, CVE-2016-3138, CVE-2016-3139, CVE-2016-3140, CVE-2016-3156, CVE-2016-3157, CVE-2016-3672, CVE-2016-3689, CVE-2016-3699, CVE-2016-3841, CVE-2016-3951, CVE-2016-3955, CVE-2016-4470, CVE-2016-4482, CVE-2016-4485, CVE-2016-4486, CVE-2016-4557, CVE-2016-4565, CVE-2016-4569, CVE-2016-4578, CVE-2016-4580, CVE-2016-4581, CVE-2016-4794, CVE-2016-4805, CVE-2016-4913, CVE-2016-4951, CVE-2016-5195, CVE-2016-5244, CVE-2016-5412, CVE-2016-5696, CVE-2016-5828, CVE-2016-5829, CVE-2016-6136, CVE-2016-6197, CVE-2016-6198, CVE-2016-6327, CVE-2016-6480, CVE-2016-7039, CVE-2016-7117

Published on 27/04/16 - Updated on 05/01/18

Description

fs/pipe.c in the Linux kernel before 4.5 does not limit the amount of unread data in pipes, which allows local users to cause a denial of service (memory consumption) by creating many pipes with non-default sizes.

Category: Resource Management Error

CWE-399 (Resource Management Errors)
Weaknesses in this category are related to improper management of system resources.

Security Notices

US National Vulnerability DatabaseCVE-2016-2847
Amazon Linux ALAS-2016-669
Agence Nationale de la Sécurité des Systèmes d'Information CERTFR-2016-AVI-082, CERTFR-2016-AVI-114, CERTFR-2016-AVI-156, CERTFR-2016-AVI-159
CentOS CESA-2016:2574
Debian DSA-3503-1
Oracle Linux ELSA-2016-2574, ELSA-2016-3596
Redhat RHSA-2016:2574, RHSA-2016:2584, RHSA-2017:0217
SUSE SUSE-SU-2016:1203, SUSE-SU-2016:1672, SUSE-SU-2016:1690, SUSE-SU-2016:1696, SUSE-SU-2016:2074
Ubuntu USN-2946-1, USN-2946-2, USN-2947-1, USN-2947-2, USN-2947-3, USN-2948-1, USN-2948-2, USN-2949-1, USN-2965-2, USN-2967-1, USN-2967-2

Exploits

No exploits available for this CVE in our database.

Relative technologies

VendorProduct
linuxlinux_kernel
novellsuse_linux_enterprise_debuginfo
novellsuse_linux_enterprise_desktop
novellsuse_linux_enterprise_live_patching
novellsuse_linux_enterprise_module_for_public_cloud
novellsuse_linux_enterprise_real_time_extension
novellsuse_linux_enterprise_server
novellsuse_linux_enterprise_software_development_kit
novellsuse_linux_enterprise_workstation_extension

Share this vulnerability with:

Twitter Facebook LinkedIn Mail