PT-2016-7432 · Linux+3 · Linux Kernel+3

Published 2016-03-17 · Updated 2017-06-07 · CVE-2016-7917

Positive Technologies (AI Summary)

CVSS v3.1

5.0

Medium

Base vector

AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.5

Description The issue allows local users to obtain sensitive information from kernel memory or cause a denial of service by leveraging the CAP NET ADMIN capability. This is due to the nfnetlink rcv batch function in net/netfilter/nfnetlink.c not checking whether a batch message's length field is large enough, potentially leading to an infinite loop or out-of-bounds read.

Recommendations For Linux kernel versions prior to 4.5, update to version 4.5 or later to resolve the issue. As a temporary workaround, consider restricting the use of the CAP NET ADMIN capability to minimize the risk of exploitation.

Fix

DoS

Out of bounds Read

Information Disclosure

Weakness Enumeration

CWE-125

CWE-200

Related Identifiers

ALT-PU-2016-1262

ALT-PU-2016-2322

CVE-2016-7917

MGASA-2017-0136

MGASA-2017-0147

MGASA-2017-0148

OPENSUSE-SU-2016_3050-1

OPENSUSE-SU-2017_0458-1

SUSE-SU-2017:0181-1

USN-3312-1

USN-3312-2

Affected Products

Alt Linux

Linux Kernel

Suse

Ubuntu

References · 203

• https://github.com/torvalds/linux/commit/c58d6c93680f28ac58984af61d0a7ebf4319c241 · Patch
• https://ubuntu.com/security/CVE-2016-8632 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-0605 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-7917 · Security Note
• https://ubuntu.com/security/CVE-2017-7889 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-7895 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-7917 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-7618 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2017-0147 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-9604 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2017:0181-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2016-7917 · Security Note
• https://ubuntu.com/security/CVE-2016-9084 · Vendor Advisory
• https://osv.dev/vulnerability/USN-3312-2 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2017-0136.html · Security Note