PT-2016-7815 · Linux+2 · Linux Kernel+2

Andrey Konovalov + 2 · Publicado 2016-12-28 · Atualizado 2018-08-13 · CVE-2016-9755

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.9

Description The issue is related to the netfilter subsystem in the Linux kernel, which mishandles IPv6 reassembly. This can be exploited by local users via a crafted application that makes socket, connect, and writev system calls, potentially leading to a denial of service (integer overflow, out-of-bounds write, and GPF) or other unspecified impacts.

Recommendations For Linux kernel versions prior to 4.9, update to version 4.9 or later to resolve the issue.

Correção

DoS

Memory Corruption

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

ALT-PU-2017-1011

ALT-PU-2017-1330

CVE-2016-9755

USN-3359-1

USN-3361-1

Produtos afetados

Alt Linux

Linux Kernel

Ubuntu

Referências · 57

• https://github.com/torvalds/linux/commit/9b57da0630c9fd36ed7a20fc0f98dc82cc0777fa · Nota
• https://cve.org/CVERecord?id=CVE-2016-9755 · Nota de Segurança
• https://ubuntu.com/security/CVE-2017-2618 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2017-2671 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2017-5551 · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=1400904 · Nota
• https://ubuntu.com/security/CVE-2017-2583 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2017-7273 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2016-9604 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2017-7261 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2017-5546 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-9755 · Nota de Segurança
• https://ubuntu.com/security/notices/USN-3359-1 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2016-8405 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2016-10208 · Aviso do Fabricante