VDB

CVE-2015-7990

CVE-2015-7990 PUBLISHED CVSS 5.800000190734863 MEDIUM

Race condition in the rds_sendmsg function in net/rds/sendmsg.c in the Linux kernel before 4.3.3 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by using a socket that was not properly bound. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-6937.

EPSS 0.35% · 26.0th percentile

Risk Scores

CVSS 3.0
5.800000190734863
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H
EPSS Score
0.35%
26.0th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSlinux-lts-vivid*, *, 3.19.0-47.53~14.04.1
Ubuntu:14.04:LTSlinux3.13.0-16.36, 3.13.0-18.38, 3.13.0-19.39
Ubuntu:14.04:LTSlinux-lts-wily4.2.0-19.23~14.04.1, *, 4.2.0-22.27~14.04.1
Ubuntu:14.04:LTSlinux-lts-utopic*, *, *

Timeline

  • Nov 26, 2015 CVE Published
  • Feb 4, 2022 EPSS Score
  • Mar 29, 2022 EPSS Score
  • May 14, 2022 CVE Updated
  • May 21, 2022 EPSS Score
  • Jul 15, 2022 EPSS Score
  • Sep 6, 2022 EPSS Score
  • Oct 29, 2022 EPSS Score
  • Dec 21, 2022 EPSS Score
  • Feb 12, 2023 EPSS Score
  • Mar 7, 2023 EPSS Score
  • Apr 7, 2023 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›