PT-2016-7431 · Linux+3 · Linux Kernel+3

Jotik · Publicado 2016-05-12 · Atualizado 2017-04-25 · CVE-2016-7916

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.5.4

Description A race condition exists in the environ read function, allowing local users to obtain sensitive information from kernel memory. This occurs when reading a /proc/*/environ file during a process-setup time interval in which environment-variable copying is incomplete.

Recommendations For Linux kernel versions prior to 4.5.4, update to version 4.5.4 or later to resolve the issue.

Correção

Race Condition

Enumeração de Fraquezas

CWE-362

Identificadores relacionados

ALT-PU-2016-1490

ALT-PU-2017-1330

CVE-2016-7916

OPENSUSE-SU-2016_3061-1

SUSE-SU-2017:0333-1

SUSE-SU-2017:0437-1

SUSE-SU-2017:0494-1

SUSE-SU-2017:1102-1

USN-3159-1

USN-3159-2

USN-3160-1

USN-3160-2

Produtos afetados

Alt Linux

Linux Kernel

Suse

Ubuntu

Referências · 287

• https://github.com/torvalds/linux/commit/8148a73c9901a8794a50f950083c00ccf97d43b3 · Correção
• https://bugzilla.suse.com/980371 · Nota
• https://suse.com/security/cve/CVE-2016-4805 · Nota
• https://suse.com/security/cve/CVE-2016-7910 · Nota
• https://bugzilla.suse.com/909077 · Nota
• https://bugzilla.suse.com/978821 · Nota
• https://bugzilla.suse.com/973691 · Nota
• https://bugzilla.suse.com/979213 · Nota
• https://bugzilla.suse.com/1016688 · Nota
• https://bugzilla.suse.com/763198 · Nota
• https://bugzilla.suse.com/1010711 · Nota
• https://suse.com/security/cve/CVE-2016-5829 · Nota
• https://bugzilla.suse.com/940966 · Nota
• https://bugzilla.suse.com/1010716 · Nota
• https://suse.com/security/cve/CVE-2016-7425 · Nota