CVE-2016-3134

EPSS 1.23%
Veröffentlicht 27.04.2016 17:59:22
Zuletzt bearbeitet 06.05.2026 22:30:45
Erkennungen
Login

The netfilter subsystem in the Linux kernel through 4.5.2 does not validate certain offset fields, which allows local users to gain privileges or cause a denial of service (heap memory corruption) via an IPT_SO_SET_REPLACE setsockopt call.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 44

NVD 16 VulnDex Vulnerability Enrichment 8

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Novell ≫ Suse Linux Enterprise Software Development Kit Version 11.0 Update sp4

Novell ≫ Suse Linux Enterprise Software Development Kit Version 12.0

Novell ≫ Suse Linux Enterprise Software Development Kit Version 12.0 Update sp1

Novell ≫ Suse Linux Enterprise Debuginfo Version 11.0 Update sp4

Novell ≫ Suse Linux Enterprise Desktop Version 12.0

Novell ≫ Suse Linux Enterprise Desktop Version 12.0 Update sp1

Novell ≫ Suse Linux Enterprise Live Patching Version 12.0

Novell ≫ Suse Linux Enterprise Module For Public Cloud Version 12.0

Novell ≫ Suse Linux Enterprise Real Time Extension Version 12.0 Update sp1

Novell ≫ Suse Linux Enterprise Server Version 11.0 Update extra

Novell ≫ Suse Linux Enterprise Server Version 11.0 Update sp4

Novell ≫ Suse Linux Enterprise Server Version 12.0

Novell ≫ Suse Linux Enterprise Server Version 12.0 Update sp1

Novell ≫ Suse Linux Enterprise Workstation Extension Version 12.0

Novell ≫ Suse Linux Enterprise Workstation Extension Version 12.0 Update sp1

Linux ≫ Linux Kernel Version <= 4.5.2

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.23%	0.651

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	8.4	2.5	5.9	CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST	7.2	3.9	10	AV:L/AC:L/Au:N/C:C/I:C/A:C

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html

http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html

http://www.securitytracker.com/id/1036763

http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html

http://www.ubuntu.com/usn/USN-2929-1

http://www.ubuntu.com/usn/USN-2929-2

http://www.ubuntu.com/usn/USN-2932-1

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00003.html

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00008.html

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00009.html

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00014.html

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00015.html

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00016.html

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00018.html

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00019.html

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00020.html

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00021.html

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00022.html

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00026.html

http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html

http://www.ubuntu.com/usn/USN-2931-1

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html

http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html

http://www.ubuntu.com/usn/USN-2930-1

http://www.ubuntu.com/usn/USN-2930-2

http://www.ubuntu.com/usn/USN-2930-3

http://www.debian.org/security/2016/dsa-3607

http://www.ubuntu.com/usn/USN-3049-1

http://www.ubuntu.com/usn/USN-3050-1

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00056.html

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=54d83fc74aa9ec72794373cb47432c5f7fb1a309

http://rhn.redhat.com/errata/RHSA-2016-1847.html

http://rhn.redhat.com/errata/RHSA-2016-1875.html

http://rhn.redhat.com/errata/RHSA-2016-1883.html

http://www.securityfocus.com/bid/84305

https://bugzilla.redhat.com/show_bug.cgi?id=1317383

https://code.google.com/p/google-security-research/issues/detail?id=758

https://github.com/torvalds/linux/commit/54d83fc74aa9ec72794373cb47432c5f7fb1a309

https://nvd.nist.gov/vuln/detail/CVE-2016-3134

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2016-3134

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2016-3134

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2016-3134