PT-2016-6377 · Linux+1 · Linux Kernel+1

Publicado 2015-06-03 · Atualizado 2020-08-03 · CVE-2016-5343

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions 3.x

Description The issue allows attackers to cause a denial of service, resulting in memory corruption, or possibly have other unspecified impacts via a write request. This can be demonstrated by a buffer overflow in the voice svc send req function.

Recommendations For Linux kernel version 3.x, consider applying a patch to fix the buffer overflow issue in the voice svc send req function to prevent memory corruption and potential denial of service attacks.

Correção

DoS

Buffer Overflow

Enumeração de Fraquezas

CWE-120

Identificadores relacionados

ALT-PU-2015-1485

ALT-PU-2015-1849

CVE-2016-5343

Produtos afetados

Alt Linux

Linux Kernel

Referências · 6

• https://osv.dev/vulnerability/CVE-2016-5343 · Aviso do Fabricante
• https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=6927e2e0af4dcac357be86ba563c9ae12354bb08 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2016-5343 · Nota de Segurança
• http://securityfocus.com/bid/93330 · Nota
• http://source.android.com/security/bulletin/2016-10-01.html · Aviso do Fabricante
• https://codeaurora.org/multiple-memory-corruption-issues-write-operation-qdsp6v2-voice-service-driver-cve-2016-5343 · Nota