PT-2016-5665 · Red Hat+2 · Red Hat Enterprise Mrg+3

Linn Crosetto + 1 · Publicado 2016-10-07 · Atualizado 2023-02-13 · CVE-2016-3699

Positive Technologies (AI Summary)

CVSS v3.1

7.4

Alta

Vetor base

AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions as used in Red Hat Enterprise Linux 7.2 and Red Hat Enterprise MRG 2

Description The issue allows local users to bypass intended Secure Boot restrictions and execute untrusted code by appending ACPI tables to the initrd when the system is booted with UEFI Secure Boot enabled.

Recommendations For Red Hat Enterprise Linux 7.2 and Red Hat Enterprise MRG 2, consider disabling UEFI Secure Boot or restricting the appending of ACPI tables to the initrd until a patch is available.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CESA-2016_2574

CVE-2016-3699

RHSA-2016:2574

RHSA-2016:2584

RHSA-2016_2574

RHSA-2016_2584

Produtos afetados

Centos

Linux Kernel

Red Hat

Red Hat Enterprise Mrg

Referências · 11

• 🔥 https://github.com/mjg59/linux/commit/a4a5ed2835e8ea042868b7401dced3f517cafa76 · Exploit
• http://openwall.com/lists/oss-security/2016/09/22/4 · Nota
• https://bugzilla.redhat.com/show_bug.cgi?id=1329653 · Correção
• http://securityfocus.com/bid/93114 · Nota
• https://linux.oracle.com/errata/ELSA-2016-3644.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-3699 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2016-3699 · Aviso do Fabricante
• http://rhn.redhat.com/errata/RHSA-2016-2584.html · Aviso do Fabricante
• https://linux.oracle.com/errata/ELSA-2016-3645.html · Aviso do Fabricante
• http://rhn.redhat.com/errata/RHSA-2016-2574.html · Aviso do Fabricante
• https://linux.oracle.com/errata/ELSA-2016-2574.html · Aviso do Fabricante