PT-2016-2593 · Linux+2 · Linux Kernel+2

Published 2016-08-06 · Updated 2017-07-25 · CVE-2015-8944

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.7

Description The issue is related to the ioresources init function in the Linux kernel, which uses weak permissions for the /proc/iomem file. This allows local users to obtain sensitive information by reading this file. The problem is noted in Android versions before 2016-08-05 on Nexus 6 and 7 (2013) devices. It is worth noting that the permissions may be intentional in most non-Android contexts.

Recommendations For Linux kernel versions prior to 4.7, consider restricting access to the /proc/iomem file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

ALT-PU-2016-1862

ALT-PU-2017-1330

BDU:2016-01985

CVE-2015-8944

USN-3360-1

USN-3360-2

USN-3364-1

USN-3364-2

USN-3364-3

Affected Products

Alt Linux

Linux Kernel

Ubuntu

References · 187

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_priv_esc_ipv4.rb · Exploit
• 🔥 https://github.com/wpengfei/CVE-2016-6516-exploit · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8660 · Security Note
• http://source.android.com/security/bulletin/2016-08-01.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5986 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10906 · Security Note
• https://ubuntu.com/security/CVE-2015-8944 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6516 · Security Note
• https://bdu.fstec.ru/vul/2016-02241 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20261 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3713 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5970 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8962 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4569 · Security Note
• https://bdu.fstec.ru/vul/2017-00291 · Security Note