7.8

CVE-2016-7425

The arcmsr_iop_message_xfer function in drivers/scsi/arcmsr/arcmsr_hba.c in the Linux kernel through 4.8.2 does not restrict a certain length field, which allows local users to gain privileges or cause a denial of service (heap-based buffer overflow) via an ARCMSR_MESSAGE_WRITE_WQBUFFER control code.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 3.2 < 3.2.84
Linux ≫ Linux Kernel Version >= 3.3 < 3.10.105
Linux ≫ Linux Kernel Version >= 3.11 < 3.12.67
Linux ≫ Linux Kernel Version >= 3.13 < 3.16.39
Linux ≫ Linux Kernel Version >= 3.17 < 3.18.46
Linux ≫ Linux Kernel Version >= 3.19 < 4.1.37
Linux ≫ Linux Kernel Version >= 4.2 < 4.4.27
Linux ≫ Linux Kernel Version >= 4.5 < 4.7.10
Linux ≫ Linux Kernel Version >= 4.8 < 4.8.4
Canonical ≫ Ubuntu Linux Version 12.04 SwEdition -
Canonical ≫ Ubuntu Linux Version 14.04 SwEdition esm
Canonical ≫ Ubuntu Linux Version 16.04 SwEdition esm
Canonical ≫ Ubuntu Linux Version 16.10
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.43% 0.342
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://www.ubuntu.com/usn/USN-3146-1
Third Party Advisory
http://www.ubuntu.com/usn/USN-3146-2
Third Party Advisory
http://www.ubuntu.com/usn/USN-3147-1
Third Party Advisory
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=7bc2b55a5c030685b399bb65b6baa9ccc3d1f167
Patch
Vendor Advisory
Issue Tracking
http://marc.info/?l=linux-scsi&m=147394713328707&w=2
Patch
Third Party Advisory
Mailing List
http://marc.info/?l=linux-scsi&m=147394796228991&w=2
Third Party Advisory
Mailing List
http://www.openwall.com/lists/oss-security/2016/09/17/2
Third Party Advisory
Mailing List
http://www.securityfocus.com/bid/93037
Third Party Advisory
VDB Entry
http://www.ubuntu.com/usn/USN-3144-1
Third Party Advisory
http://www.ubuntu.com/usn/USN-3144-2
Third Party Advisory
http://www.ubuntu.com/usn/USN-3145-1
Third Party Advisory
http://www.ubuntu.com/usn/USN-3145-2
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1377330
Third Party Advisory
Issue Tracking
https://github.com/torvalds/linux/commit/7bc2b55a5c030685b399bb65b6baa9ccc3d1f167
Patch
Third Party Advisory
Issue Tracking
https://security-tracker.debian.org/tracker/CVE-2016-7425
Third Party Advisory