PT-2016-7535 · Linux+5 · Linux Kernel+5

Eyal Itkin

·

Publicado

2016-11-11

·

Atualizado

2023-02-12

·

CVE-2016-8633

CVSS v3.1

6.8

Média

VetorAV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.8.7
Description The issue allows remote attackers to execute arbitrary code via crafted fragmented packets in certain unusual hardware configurations.
Recommendations For versions prior to 4.8.7, update to version 4.8.7 or later to resolve the issue.

Correção

RCE

Buffer Overflow

Improper Access Control

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119CWE-284

Identificadores relacionados

ALT-PU-2016-2276
ALT-PU-2017-1330
CESA-2018_1062
CVE-2016-8633
DLA-772-1
MGASA-2016-0401
MGASA-2016-0411
MGASA-2016-0412
OPENSUSE-SU-2016_3058-1
OPENSUSE-SU-2016_3061-1
RHSA-2018:0676
RHSA-2018:1062
RHSA-2018_0676
RHSA-2018_1062
RHSA-2019:1170
RHSA-2019:1190
SUSE-SU-2017:0333-1
SUSE-SU-2017:0407-1
SUSE-SU-2017:0437-1
SUSE-SU-2017:0464-1
SUSE-SU-2017:0471-1
SUSE-SU-2017:0494-1
SUSE-SU-2017:1102-1
USN-3161-1
USN-3161-2
USN-3161-3
USN-3161-4
USN-3162-1
USN-3162-2
USN-3445-1
USN-3445-2

Produtos afetados

Alt Linux
Centos
Linux Kernel
Red Hat
Suse
Ubuntu