PT-2016-6377 · Linux+1 · Linux Kernel+1

Published 2015-06-03 · Updated 2020-08-03 · CVE-2016-5343

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions 3.x

Description The issue allows attackers to cause a denial of service, resulting in memory corruption, or possibly have other unspecified impacts via a write request. This can be demonstrated by a buffer overflow in the voice svc send req function.

Recommendations For Linux kernel version 3.x, consider applying a patch to fix the buffer overflow issue in the voice svc send req function to prevent memory corruption and potential denial of service attacks.

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

ALT-PU-2015-1485

ALT-PU-2015-1849

CVE-2016-5343

Affected Products

Alt Linux

Linux Kernel

References · 6

• https://osv.dev/vulnerability/CVE-2016-5343 · Vendor Advisory
• https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=6927e2e0af4dcac357be86ba563c9ae12354bb08 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2016-5343 · Security Note
• http://source.android.com/security/bulletin/2016-10-01.html · Vendor Advisory
• http://securityfocus.com/bid/93330 · Note
• https://codeaurora.org/multiple-memory-corruption-issues-write-operation-qdsp6v2-voice-service-driver-cve-2016-5343 · Note