PT-2017-8718 · Red Hat+1 · Red Hat Enterprise Linux Server+5

Adam Mariš + 1 · Published 2016-11-03 · Updated 2023-02-12 · CVE-2016-5405

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Red Hat Enterprise Linux Desktop versions 6 through 7 Red Hat Enterprise Linux HPC Node versions 6 through 7 Red Hat Enterprise Linux Server versions 6 through 7 Red Hat Enterprise Linux Workstation versions 6 through 7

Description The issue allows remote attackers to obtain user passwords.

Recommendations For Red Hat Enterprise Linux Desktop versions 6 through 7, update to a version that contains a fix for this issue. For Red Hat Enterprise Linux HPC Node versions 6 through 7, update to a version that contains a fix for this issue. For Red Hat Enterprise Linux Server versions 6 through 7, update to a version that contains a fix for this issue. For Red Hat Enterprise Linux Workstation versions 6 through 7, update to a version that contains a fix for this issue.

Fix

Weakness Enumeration

CWE-199

Related Identifiers

CESA-2016_2594

CESA-2016_2765

CVE-2016-5405

RHSA-2016:2594

RHSA-2016:2765

RHSA-2016_2594

RHSA-2016_2765

Affected Products

Centos

Red Hat

Red Hat Enterprise Linux Desktop

Red Hat Enterprise Linux Hpc Node

Red Hat Enterprise Linux Server

Red Hat Enterprise Linux Workstation

References · 10

• https://osv.dev/vulnerability/CVE-2016-5405 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-5405 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2016-5405 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2016-2594.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2016-5405 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2016-2765.html · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1358865 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2016-2594.html · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2016-2765.html · Vendor Advisory
• http://securityfocus.com/bid/93884 · Note