CVE-2016-6213
説明
It was found that in Linux kernel the mount table expands by a power-of-two with each bind mount command. If a system is configured to allow non-privileged user to do bind mounts, or allows to do so in a container or unprivileged mount namespace, then non-privileged user is able to cause a local DoS by overflowing the mount table, which causes a deadlock for the whole system.
詳細
This issue does not affect the Linux kernel packages as shipped with Red Hat Enterprise Linux 5, 6, 7 and MRG-2 as of now due to the absence of unprivileged mount name spaces support.
Nevertheless, the unprivileged mount name spaces might be added to a future RHEL-7 version as a supported feature, so future Linux kernel updates for the respective releases might address this issue.
CVSS (Common Vulnerability Scoring System) のスコアの詳細
Info alert:Important note
CVSS scores for open source components depend on vendor-specific factors (e.g. version or build chain). Therefore, Red Hat's score and impact rating can be different from NVD and other vendors. Red Hat remains the authoritative CVE Naming Authority (CNA) source for its products and services (see Red Hat classifications).
CVSS v3 スコアの内訳
| Red Hat | NVD | cve.org | |
|---|---|---|---|
| ベーススコア | 4.7 | 4.7 | N/A |
| 攻撃ベクトル | Local | Local | N/A |
| 攻撃の複雑さ | High | High | N/A |
| 必要な権限 | Low | Low | N/A |
| ユーザー関与レベル | None | None | N/A |
| 範囲 | Unchanged | Unchanged | N/A |
| 機密性 | None | None | N/A |
| 完全性への影響 | None | None | N/A |
| 可用性への影響 | High | High | N/A |
ベクトル
Red Hat: CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD: CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v2 スコアの内訳
| Red Hat | NVD | cve.org | |
|---|---|---|---|
| ベーススコア | 4 | 4.7 | N/A |
| 攻撃ベクトル | Local | Local | N/A |
| アクセスの複雑さ | High | Medium | N/A |
| 認証 | None | None | N/A |
| 機密性への影響 | None | None | N/A |
| 完全性への影響 | None | None | N/A |
| 可用性への影響 | Complete | Complete | N/A |
ベクトル
Red Hat: AV:L/AC:H/Au:N/C:N/I:N/A:C
NVD: AV:L/AC:M/Au:N/C:N/I:N/A:C
脆弱性の原因 (CWE) の理解
Availability
Technical Impact: DoS: Resource Consumption (CPU); DoS: Resource Consumption (Memory); DoS: Resource Consumption (Other)
When allocating resources without limits, an attacker could prevent other systems, applications, or processes from accessing the same type of resource. It can be easy for an attacker to consume many resources by rapidly making many requests or causing larger resources to be used than is needed.
謝辞
This issue was discovered by Qian Cai (Red Hat).
よくある質問
Not sure what something means? Check out our Security Glossary.
エラータ通知の受信を希望しますか? こちらで登録してください。
