PT-2016-6699 · Fortinet+6 · Fortios+6
Publicado
2016-06-27
·
Atualizado
2024-06-15
·
CVE-2016-5829
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 4.6.3
FortiOS (affected versions not specified)
Description
The issue is related to multiple heap-based buffer overflows in the Linux kernel, specifically in the hiddev ioctl usage function. This can be exploited by local users through crafted ioctl calls, such as HIDIOCGUSAGES or HIDIOCSUSAGES, potentially leading to a denial of service or other unspecified impacts. Additionally, there is a mention of a vulnerability in FortiOS, but details are not provided.
Recommendations
For Linux kernel versions prior to 4.6.3: Update to a version newer than 4.6.3 to resolve the issue.
For FortiOS: At the moment, there is no information about a newer version that contains a fix for this vulnerability.
DoS
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Centos
Fortios
Linux Kernel
Red Hat
Suse
Ubuntu