James Morris

5 exploits Active since Feb 2013
CVE-2016-0728 WRITEUP HIGH WRITEUP
Linux kernel <4.4.1 - Privilege Escalation/DoS
The join_session_keyring function in security/keys/process_keys.c in the Linux kernel before 4.4.1 mishandles object references in a certain error case, which allows local users to gain privileges or cause a denial of service (integer overflow and use-after-free) via crafted keyctl commands.
CVSS 7.8
CVE-2013-0313 WRITEUP WRITEUP
Linux Kernel < 3.7.5 - Denial of Service via EVM xattr Handling
The evm_update_evmxattr function in security/integrity/evm/evm_crypto.c in the Linux kernel before 3.7.5, when the Extended Verification Module (EVM) is enabled, allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via an attempted removexattr operation on an inode of a sockfs filesystem.
CVE-2015-1333 WRITEUP WRITEUP
Linux Kernel < 4.1.4 - Denial of Service via Keyring Memory Leak
Memory leak in the __key_link_end function in security/keys/keyring.c in the Linux kernel before 4.1.4 allows local users to cause a denial of service (memory consumption) via many add_key system calls that refer to existing keys.
CVE-2016-8650 WRITEUP MEDIUM WRITEUP
Linux Kernel < 4.8.11 - Denial of Service via RSA Key with Zero Exponent
The mpi_powm function in lib/mpi/mpi-pow.c in the Linux kernel through 4.8.11 does not ensure that memory is allocated for limb data, which allows local users to cause a denial of service (stack memory corruption and panic) via an add_key system call for an RSA key with a zero exponent.
CVSS 5.5
CVE-2017-15274 WRITEUP MEDIUM WRITEUP
Linux Kernel < 4.11.4 - Denial of Service via NULL Payload in keyctl System Call
security/keys/keyctl.c in the Linux kernel before 4.11.5 does not consider the case of a NULL payload in conjunction with a nonzero length value, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) via a crafted add_key or keyctl system call, a different vulnerability than CVE-2017-12192.
CVSS 5.5