Vulnerability-Lookup

SUSE-SU-2017:0494-1

Vulnerability from csaf_suse - Published: 2017-02-17 13:56 - Updated: 2026-09-20 12:23

Summary

Security update for the Linux Kernel

Severity

Important

Notes

Title of the patch: Security update for the Linux Kernel

Description of the patch: The SUSE Linux Enterprise 11 SP3 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2015-8970: crypto/algif_skcipher.c in the Linux kernel did not verify that a setkey operation has been performed on an AF_ALG socket before an accept system call is processed, which allowed local users to cause a denial of service (NULL pointer dereference and system crash) via a crafted application that did not supply a key, related to the lrw_crypt function in crypto/lrw.c (bnc#1008374). - CVE-2017-5551: Clear S_ISGID on tmpfs when setting posix ACLs (bsc#1021258). - CVE-2016-7097: The filesystem implementation in the Linux kernel preserves the setgid bit during a setxattr call, which allowed local users to gain group privileges by leveraging the existence of a setgid program with restrictions on execute permissions (bnc#995968). - CVE-2016-10088: The sg implementation in the Linux kernel did not properly restrict write operations in situations where the KERNEL_DS option is set, which allowed local users to read or write to arbitrary kernel memory locations or cause a denial of service (use-after-free) by leveraging access to a /dev/sg device, related to block/bsg.c and drivers/scsi/sg.c. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-9576 (bnc#1017710). - CVE-2004-0230: TCP, when using a large Window Size, made it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to persistent TCP connections by repeatedly injecting a TCP RST packet, especially in protocols that use long-lived connections, such as BGP (bnc#969340). - CVE-2016-8632: The tipc_msg_build function in net/tipc/msg.c in the Linux kernel did not validate the relationship between the minimum fragment length and the maximum packet size, which allowed local users to gain privileges or cause a denial of service (heap-based buffer overflow) by leveraging the CAP_NET_ADMIN capability (bnc#1008831). - CVE-2016-8399: An elevation of privilege vulnerability in the kernel networking subsystem could have enabled a local malicious application to execute arbitrary code within the context of the kernel bnc#1014746). - CVE-2016-9793: The sock_setsockopt function in net/core/sock.c in the Linux kernel mishandled negative values of sk_sndbuf and sk_rcvbuf, which allowed local users to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact by leveraging the CAP_NET_ADMIN capability for a crafted setsockopt system call with the (1) SO_SNDBUFFORCE or (2) SO_RCVBUFFORCE option (bnc#1013531). - CVE-2012-6704: The sock_setsockopt function in net/core/sock.c in the Linux kernel mishandled negative values of sk_sndbuf and sk_rcvbuf, which allowed local users to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact by leveraging the CAP_NET_ADMIN capability for a crafted setsockopt system call with the (1) SO_SNDBUF or (2) SO_RCVBUF option (bnc#1013542). - CVE-2016-9756: arch/x86/kvm/emulate.c in the Linux kernel did not properly initialize Code Segment (CS) in certain error cases, which allowed local users to obtain sensitive information from kernel stack memory via a crafted application (bnc#1013038). - CVE-2016-3841: The IPv6 stack in the Linux kernel mishandled options data, which allowed local users to gain privileges or cause a denial of service (use-after-free and system crash) via a crafted sendmsg system call (bnc#992566). - CVE-2016-9685: Multiple memory leaks in error paths in fs/xfs/xfs_attr_list.c in the Linux kernel allowed local users to cause a denial of service (memory consumption) via crafted XFS filesystem operations (bnc#1012832). - CVE-2015-1350: The VFS subsystem in the Linux kernel provided an incomplete set of requirements for setattr operations that underspecifies removing extended privilege attributes, which allowed local users to cause a denial of service (capability stripping) via a failed invocation of a system call, as demonstrated by using chown to remove a capability from the ping or Wireshark dumpcap program (bnc#914939). - CVE-2015-8962: Double free vulnerability in the sg_common_write function in drivers/scsi/sg.c in the Linux kernel allowed local users to gain privileges or cause a denial of service (memory corruption and system crash) by detaching a device during an SG_IO ioctl call (bnc#1010501). - CVE-2016-9555: The sctp_sf_ootb function in net/sctp/sm_statefuns.c in the Linux kernel lacked chunk-length checking for the first chunk, which allowed remote attackers to cause a denial of service (out-of-bounds slab access) or possibly have unspecified other impact via crafted SCTP data (bnc#1011685). - CVE-2016-7910: Use-after-free vulnerability in the disk_seqf_stop function in block/genhd.c in the Linux kernel allowed local users to gain privileges by leveraging the execution of a certain stop operation even if the corresponding start operation had failed (bnc#1010716). - CVE-2016-7911: Race condition in the get_task_ioprio function in block/ioprio.c in the Linux kernel allowed local users to gain privileges or cause a denial of service (use-after-free) via a crafted ioprio_get system call (bnc#1010711). - CVE-2015-8964: The tty_set_termios_ldisc function in drivers/tty/tty_ldisc.c in the Linux kernel allowed local users to obtain sensitive information from kernel memory by reading a tty data structure (bnc#1010507). - CVE-2016-7916: Race condition in the environ_read function in fs/proc/base.c in the Linux kernel allowed local users to obtain sensitive information from kernel memory by reading a /proc/*/environ file during a process-setup time interval in which environment-variable copying is incomplete (bnc#1010467). - CVE-2016-8646: The hash_accept function in crypto/algif_hash.c in the Linux kernel allowed local users to cause a denial of service (OOPS) by attempting to trigger use of in-kernel hash algorithms for a socket that has received zero bytes of data (bnc#1010150). - CVE-2016-8633: drivers/firewire/net.c in the Linux kernel in certain unusual hardware configurations allowed remote attackers to execute arbitrary code via crafted fragmented packets (bnc#1008833). - CVE-2016-7042: The proc_keys_show function in security/keys/proc.c in the Linux, when the GNU Compiler Collection (gcc) stack protector is enabled, used an incorrect buffer size for certain timeout data, which allowed local users to cause a denial of service (stack memory corruption and panic) by reading the /proc/keys file (bnc#1004517). - CVE-2015-8956: The rfcomm_sock_bind function in net/bluetooth/rfcomm/sock.c in the Linux kernel allowed local users to obtain sensitive information or cause a denial of service (NULL pointer dereference) via vectors involving a bind system call on a Bluetooth RFCOMM socket (bnc#1003925). - CVE-2016-7117: Use-after-free vulnerability in the __sys_recvmmsg function in net/socket.c in the Linux kernel allowed remote attackers to execute arbitrary code via vectors involving a recvmmsg system call that is mishandled during error processing (bnc#1003077). - CVE-2016-0823: The pagemap_open function in fs/proc/task_mmu.c in the Linux kernel allowed local users to obtain sensitive physical-address information by reading a pagemap file (bnc#994759). - CVE-2016-7425: The arcmsr_iop_message_xfer function in drivers/scsi/arcmsr/arcmsr_hba.c in the Linux kernel did not restrict a certain length field, which allowed local users to gain privileges or cause a denial of service (heap-based buffer overflow) via an ARCMSR_MESSAGE_WRITE_WQBUFFER control code (bnc#999932). - CVE-2016-6828: The tcp_check_send_head function in include/net/tcp.h in the Linux kernel did not properly maintain certain SACK state after a failed data copy, which allowed local users to cause a denial of service (tcp_xmit_retransmit_queue use-after-free and system crash) via a crafted SACK option (bnc#994296). The following non-security bugs were fixed: - Always include the git commit in KOTD builds. This allows us not to set it explicitly in builds submitted to the official distribution (bnc#821612, bnc#824171). - KVM: x86: SYSENTER emulation is broken (bsc#994618). - NFS: Do not disconnect open-owner on NFS4ERR_BAD_SEQID (bsc#989261). - NFS: Refresh open-owner id when server says SEQID is bad (bsc#989261). - NFSv4: Ensure that we do not drop a state owner more than once (bsc#979595). - NFSv4: add flock_owner to open context (bnc#998689). - NFSv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (bnc#998689). - NFSv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (bnc#998689). - NFSv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (bnc#998689). - NFSv4: fix broken patch relating to v4 read delegations (bsc#956514, bsc#989261, bsc#979595). - SELinux: Fix possible NULL pointer dereference in selinux_inode_permission() (bsc#1012895). - USB: fix typo in wMaxPacketSize validation (bsc#991665). - USB: validate wMaxPacketValue entries in endpoint descriptors (bnc#991665). - Update patches.xen/xen3-auto-arch-x86.diff (bsc#929141, among others). - __ptrace_may_access() should not deny sub-threads (bsc#1012851). - apparmor: fix IRQ stack overflow during free_profile (bsc#1009875). - arch/powerpc: Remove duplicate/redundant Altivec entries (bsc#967716). - cdc-acm: added sanity checking for probe() (bsc#993891). - include/linux/math64.h: add div64_ul() (bsc#996329). - kabi-fix for flock_owner addition (bsc#998689). - kabi: get back scsi_device.current_cmnd (bsc#935436). - kaweth: fix firmware download (bsc#993890). - kaweth: fix oops upon failed memory allocation (bsc#993890). - kexec: add a kexec_crash_loaded() function (bsc#973691). - md linear: fix a race between linear_add() and linear_congested() (bsc#1018446). - mpi: Fix NULL ptr dereference in mpi_powm() [ver #3] (bsc#1011820). - mpt3sas: Fix panic when aer correct error occurred (bsc#997708, bsc#999943). - mremap: enforce rmap src/dst vma ordering in case of vma_merge() succeeding in copy_vma() (VM Functionality, bsc#1008645). - nfs4: reset states to use open_stateid when returning delegation voluntarily (bsc#1007944). - ocfs2: fix BUG_ON() in ocfs2_ci_checkpointed() (bnc#1019783). - posix-timers: Remove remaining uses of tasklist_lock (bnc#997401). - posix-timers: Use sighand lock instead of tasklist_lock for task clock sample (bnc#997401). - posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (bnc#997401). - powerpc: Add ability to build little endian kernels (bsc#967716). - powerpc: Avoid load of static chain register when calling nested functions through a pointer on 64bit (bsc#967716). - powerpc: Do not build assembly files with ABIv2 (bsc#967716). - powerpc: Do not use ELFv2 ABI to build the kernel (bsc#967716). - powerpc: Fix 64 bit builds with binutils 2.24 (bsc#967716). - powerpc: Fix error when cross building TAGS and cscope (bsc#967716). - powerpc: Make the vdso32 also build big-endian (bsc#967716). - powerpc: Remove altivec fix for gcc versions before 4.0 (bsc#967716). - powerpc: Remove buggy 9-year-old test for binutils lower than 2.12.1 (bsc#967716). - powerpc: Require gcc 4.0 on 64-bit (bsc#967716). - powerpc: dtc is required to build dtb files (bsc#967716). - printk/sched: Introduce special printk_sched() for those awkward (bsc#1013042, bsc#996541, bsc#1015878). - qlcnic: Schedule napi directly in netpoll (bsc#966826). - reiserfs: fix race in prealloc discard (bsc#987576). - rpm/config.sh: Set a fitting release string (bsc#997059) - rpm/kernel-binary.spec.in: Export a make-stderr.log file (bsc#1012422) - rpm/mkspec: Read a default release string from rpm/config.sh (bsc997059) - s390/dasd: fix failfast for disconnected devices (bnc#961923, LTC#135138). - sched/core: Fix a race between try_to_wake_up() and a woken up task (bnc#1002165). - sched/core: Fix an SMP ordering race in try_to_wake_up() vs. schedule() (bnc#1001419). - sched: Fix possible divide by zero in avg_atom() calculation (bsc#996329). - scsi: lpfc: Set elsiocb contexts to NULL after freeing it (bsc#996557). - scsi: remove current_cmnd field from struct scsi_device (bsc#935436). - x86/MCE/intel: Cleanup CMCI storm logic (bsc#929141). - xfs: remove the deprecated nodelaylog option (bsc#992906).

Patchnames: sleclo50sp3-linux-kernel-12992,sleman21-linux-kernel-12992,slemap21-linux-kernel-12992,sleposp3-linux-kernel-12992,slessp3-linux-kernel-12992,slexsp3-linux-kernel-12992

CVE-2004-0230

3.7 (Low)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 249 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Enterprise High Performance Computing 11 SP3:kernel-bigsmp-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 11 SP3:kernel-bigsmp-base-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 11 SP3:kernel-bigsmp-devel-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 11 SP3:kernel-default-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 11 SP3:kernel-default-0:3.0.101-0.47.96.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 11 SP3:kernel-default-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 11 SP3:kernel-default-base-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 11 SP3:kernel-default-base-0:3.0.101-0.47.96.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 11 SP3:kernel-default-base-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 11 SP3:kernel-default-devel-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 11 SP3:kernel-default-devel-0:3.0.101-0.47.96.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 11 SP3:kernel-default-devel-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 11 SP3:kernel-default-man-0:3.0.101-0.47.96.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 11 SP3:kernel-ec2-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 11 SP3:kernel-ec2-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 11 SP3:kernel-ec2-base-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 11 SP3:kernel-ec2-base-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 11 SP3:kernel-ec2-devel-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 11 SP3:kernel-ec2-devel-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 11 SP3:kernel-pae-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 11 SP3:kernel-pae-base-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 11 SP3:kernel-pae-devel-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 11 SP3:kernel-source-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 11 SP3:kernel-source-0:3.0.101-0.47.96.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 11 SP3:kernel-source-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 11 SP3:kernel-syms-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 11 SP3:kernel-syms-0:3.0.101-0.47.96.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 11 SP3:kernel-syms-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 11 SP3:kernel-trace-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 11 SP3:kernel-trace-0:3.0.101-0.47.96.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 11 SP3:kernel-trace-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 11 SP3:kernel-trace-base-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 11 SP3:kernel-trace-base-0:3.0.101-0.47.96.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 11 SP3:kernel-trace-base-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 11 SP3:kernel-trace-devel-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 11 SP3:kernel-trace-devel-0:3.0.101-0.47.96.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 11 SP3:kernel-trace-devel-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 11 SP3:kernel-xen-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 11 SP3:kernel-xen-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 11 SP3:kernel-xen-base-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 11 SP3:kernel-xen-base-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 11 SP3:kernel-xen-devel-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 11 SP3:kernel-xen-devel-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:kernel-default-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:kernel-default-base-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:kernel-default-devel-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:kernel-ec2-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:kernel-ec2-base-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:kernel-ec2-devel-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:kernel-pae-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:kernel-pae-base-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:kernel-pae-devel-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:kernel-source-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:kernel-syms-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:kernel-trace-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:kernel-trace-base-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:kernel-trace-devel-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:kernel-xen-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:kernel-xen-base-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:kernel-xen-devel-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:kernel-bigsmp-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:kernel-bigsmp-base-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:kernel-bigsmp-devel-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:kernel-default-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:kernel-default-0:3.0.101-0.47.96.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:kernel-default-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:kernel-default-base-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:kernel-default-base-0:3.0.101-0.47.96.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:kernel-default-base-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:kernel-default-devel-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:kernel-default-devel-0:3.0.101-0.47.96.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:kernel-default-devel-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:kernel-default-man-0:3.0.101-0.47.96.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:kernel-ec2-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:kernel-ec2-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:kernel-ec2-base-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:kernel-ec2-base-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:kernel-ec2-devel-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:kernel-ec2-devel-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:kernel-pae-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:kernel-pae-base-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:kernel-pae-devel-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:kernel-source-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:kernel-source-0:3.0.101-0.47.96.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:kernel-source-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:kernel-syms-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:kernel-syms-0:3.0.101-0.47.96.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:kernel-syms-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:kernel-trace-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:kernel-trace-0:3.0.101-0.47.96.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:kernel-trace-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:kernel-trace-base-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:kernel-trace-base-0:3.0.101-0.47.96.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:kernel-trace-base-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:kernel-trace-devel-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:kernel-trace-devel-0:3.0.101-0.47.96.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:kernel-trace-devel-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:kernel-xen-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:kernel-xen-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:kernel-xen-base-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:kernel-xen-base-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:kernel-xen-devel-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:kernel-xen-devel-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3:kernel-bigsmp-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3:kernel-bigsmp-base-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3:kernel-bigsmp-devel-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3:kernel-default-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3:kernel-default-0:3.0.101-0.47.96.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3:kernel-default-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3:kernel-default-base-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3:kernel-default-base-0:3.0.101-0.47.96.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3:kernel-default-base-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3:kernel-default-devel-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3:kernel-default-devel-0:3.0.101-0.47.96.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3:kernel-default-devel-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3:kernel-default-man-0:3.0.101-0.47.96.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3:kernel-ec2-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3:kernel-ec2-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3:kernel-ec2-base-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3:kernel-ec2-base-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3:kernel-ec2-devel-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3:kernel-ec2-devel-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3:kernel-pae-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3:kernel-pae-base-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3:kernel-pae-devel-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3:kernel-source-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3:kernel-source-0:3.0.101-0.47.96.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3:kernel-source-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3:kernel-syms-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3:kernel-syms-0:3.0.101-0.47.96.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3:kernel-syms-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3:kernel-trace-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3:kernel-trace-0:3.0.101-0.47.96.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3:kernel-trace-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3:kernel-trace-base-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3:kernel-trace-base-0:3.0.101-0.47.96.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3:kernel-trace-base-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3:kernel-trace-devel-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3:kernel-trace-devel-0:3.0.101-0.47.96.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3:kernel-trace-devel-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3:kernel-xen-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3:kernel-xen-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3:kernel-xen-base-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3:kernel-xen-base-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3:kernel-xen-devel-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3:kernel-xen-devel-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:kernel-bigsmp-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:kernel-bigsmp-base-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:kernel-bigsmp-devel-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:kernel-default-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:kernel-default-0:3.0.101-0.47.96.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:kernel-default-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:kernel-default-base-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:kernel-default-base-0:3.0.101-0.47.96.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:kernel-default-base-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:kernel-default-devel-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:kernel-default-devel-0:3.0.101-0.47.96.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:kernel-default-devel-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:kernel-default-man-0:3.0.101-0.47.96.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:kernel-ec2-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:kernel-ec2-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:kernel-ec2-base-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:kernel-ec2-base-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:kernel-ec2-devel-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:kernel-ec2-devel-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:kernel-pae-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:kernel-pae-base-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:kernel-pae-devel-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:kernel-source-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:kernel-source-0:3.0.101-0.47.96.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:kernel-source-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:kernel-syms-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:kernel-syms-0:3.0.101-0.47.96.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:kernel-syms-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:kernel-trace-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:kernel-trace-0:3.0.101-0.47.96.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:kernel-trace-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:kernel-trace-base-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:kernel-trace-base-0:3.0.101-0.47.96.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:kernel-trace-base-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:kernel-trace-devel-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:kernel-trace-devel-0:3.0.101-0.47.96.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:kernel-trace-devel-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:kernel-xen-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:kernel-xen-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:kernel-xen-base-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:kernel-xen-base-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:kernel-xen-devel-0:3.0.101-0.47.96.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:kernel-xen-devel-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Manager 2.1:kernel-bigsmp-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Manager 2.1:kernel-bigsmp-base-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Manager 2.1:kernel-bigsmp-devel-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Manager 2.1:kernel-default-0:3.0.101-0.47.96.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Manager 2.1:kernel-default-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Manager 2.1:kernel-default-base-0:3.0.101-0.47.96.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Manager 2.1:kernel-default-base-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Manager 2.1:kernel-default-devel-0:3.0.101-0.47.96.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Manager 2.1:kernel-default-devel-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Manager 2.1:kernel-default-man-0:3.0.101-0.47.96.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Manager 2.1:kernel-ec2-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Manager 2.1:kernel-ec2-base-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Manager 2.1:kernel-ec2-devel-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Manager 2.1:kernel-source-0:3.0.101-0.47.96.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Manager 2.1:kernel-source-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Manager 2.1:kernel-syms-0:3.0.101-0.47.96.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Manager 2.1:kernel-syms-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Manager 2.1:kernel-trace-0:3.0.101-0.47.96.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Manager 2.1:kernel-trace-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Manager 2.1:kernel-trace-base-0:3.0.101-0.47.96.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Manager 2.1:kernel-trace-base-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Manager 2.1:kernel-trace-devel-0:3.0.101-0.47.96.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Manager 2.1:kernel-trace-devel-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Manager 2.1:kernel-xen-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Manager 2.1:kernel-xen-base-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Manager 2.1:kernel-xen-devel-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Manager Proxy 2.1:kernel-bigsmp-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Manager Proxy 2.1:kernel-bigsmp-base-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Manager Proxy 2.1:kernel-bigsmp-devel-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Manager Proxy 2.1:kernel-default-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Manager Proxy 2.1:kernel-default-base-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Manager Proxy 2.1:kernel-default-devel-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Manager Proxy 2.1:kernel-ec2-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Manager Proxy 2.1:kernel-ec2-base-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Manager Proxy 2.1:kernel-ec2-devel-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Manager Proxy 2.1:kernel-source-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Manager Proxy 2.1:kernel-syms-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Manager Proxy 2.1:kernel-trace-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Manager Proxy 2.1:kernel-trace-base-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Manager Proxy 2.1:kernel-trace-devel-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Manager Proxy 2.1:kernel-xen-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Manager Proxy 2.1:kernel-xen-base-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Manager Proxy 2.1:kernel-xen-devel-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE OpenStack Cloud 5:kernel-bigsmp-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE OpenStack Cloud 5:kernel-bigsmp-base-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE OpenStack Cloud 5:kernel-bigsmp-devel-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE OpenStack Cloud 5:kernel-default-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE OpenStack Cloud 5:kernel-default-base-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE OpenStack Cloud 5:kernel-default-devel-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE OpenStack Cloud 5:kernel-ec2-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE OpenStack Cloud 5:kernel-ec2-base-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE OpenStack Cloud 5:kernel-ec2-devel-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE OpenStack Cloud 5:kernel-source-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE OpenStack Cloud 5:kernel-syms-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE OpenStack Cloud 5:kernel-trace-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE OpenStack Cloud 5:kernel-trace-base-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE OpenStack Cloud 5:kernel-trace-devel-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE OpenStack Cloud 5:kernel-xen-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE OpenStack Cloud 5:kernel-xen-base-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE OpenStack Cloud 5:kernel-xen-devel-0:3.0.101-0.47.96.1.x86_64	—	Vendor Fix

Threats

Impact low

CVE-2012-6704

6.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 249 products, the same list as for CVE-2004-0230

Threats

Impact moderate

CVE-2015-1350

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 249 products, the same list as for CVE-2004-0230

Threats

Impact moderate

CVE-2015-8956

6.1 (Medium)


                
                  CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L

Affected products

Recommended 249 products, the same list as for CVE-2004-0230

Threats

Impact moderate

CVE-2015-8962

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 249 products, the same list as for CVE-2004-0230

Threats

Impact important

CVE-2015-8964

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Affected products

Recommended 249 products, the same list as for CVE-2004-0230

Threats

Impact low

CVE-2015-8970

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 249 products, the same list as for CVE-2004-0230

Threats

Impact moderate

CVE-2016-0823

4 (Medium)


                
                  CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected products

Recommended 249 products, the same list as for CVE-2004-0230

Threats

Impact moderate

CVE-2016-10088

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 249 products, the same list as for CVE-2004-0230

Threats

Impact important

CVE-2016-3841

7.3 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 249 products, the same list as for CVE-2004-0230

Threats

Impact moderate

CVE-2016-6828

5.5 (Medium)


                
                  CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 249 products, the same list as for CVE-2004-0230

Threats

Impact moderate

CVE-2016-7042

6.2 (Medium)


                
                  CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 249 products, the same list as for CVE-2004-0230

Threats

Impact moderate

CVE-2016-7097

4.4 (Medium)


                
                  CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Affected products

Recommended 249 products, the same list as for CVE-2004-0230

Threats

Impact low

CVE-2016-7117

8.1 (High)


                
                  CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 249 products, the same list as for CVE-2004-0230

Threats

Impact moderate

CVE-2016-7425

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 249 products, the same list as for CVE-2004-0230

Threats

Impact moderate

CVE-2016-7910

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 249 products, the same list as for CVE-2004-0230

Threats

Impact important

CVE-2016-7911

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 249 products, the same list as for CVE-2004-0230

Threats

Impact moderate

CVE-2016-7916

5.5 (Medium)


                
                  CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Affected products

Recommended 249 products, the same list as for CVE-2004-0230

Threats

Impact moderate

CVE-2016-8399

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 249 products, the same list as for CVE-2004-0230

Threats

Impact moderate

CVE-2016-8632

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 249 products, the same list as for CVE-2004-0230

Threats

Impact moderate

CVE-2016-8633

6.8 (Medium)


                
                  CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 249 products, the same list as for CVE-2004-0230

Threats

Impact moderate

CVE-2016-8646

5.5 (Medium)


                
                  CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 249 products, the same list as for CVE-2004-0230

Threats

Impact moderate

CVE-2016-9555

5.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 249 products, the same list as for CVE-2004-0230

Threats

Impact moderate

CVE-2016-9685

5.5 (Medium)


                
                  CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 249 products, the same list as for CVE-2004-0230

Threats

Impact moderate

CVE-2016-9756

4.1 (Medium)


                
                  CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

Affected products

Recommended 249 products, the same list as for CVE-2004-0230

Threats

Impact moderate

CVE-2016-9793

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 249 products, the same list as for CVE-2004-0230

Threats

Impact moderate

CVE-2017-5551

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Affected products

Recommended 249 products, the same list as for CVE-2004-0230

Threats

Impact moderate

References

198 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/s…	self
https://www.suse.com/support/update/announcement/…	self
https://lists.suse.com/pipermail/sle-security-upd…	self
https://bugzilla.suse.com/1001419	self
https://bugzilla.suse.com/1002165	self
https://bugzilla.suse.com/1003077	self
https://bugzilla.suse.com/1003253	self
https://bugzilla.suse.com/1003925	self
https://bugzilla.suse.com/1004517	self
https://bugzilla.suse.com/1007944	self
https://bugzilla.suse.com/1008374	self
https://bugzilla.suse.com/1008645	self
https://bugzilla.suse.com/1008831	self
https://bugzilla.suse.com/1008833	self
https://bugzilla.suse.com/1008850	self
https://bugzilla.suse.com/1009875	self
https://bugzilla.suse.com/1010150	self
https://bugzilla.suse.com/1010467	self
https://bugzilla.suse.com/1010501	self
https://bugzilla.suse.com/1010507	self
https://bugzilla.suse.com/1010711	self
https://bugzilla.suse.com/1010713	self
https://bugzilla.suse.com/1010716	self
https://bugzilla.suse.com/1011685	self
https://bugzilla.suse.com/1011820	self
https://bugzilla.suse.com/1012183	self
https://bugzilla.suse.com/1012422	self
https://bugzilla.suse.com/1012832	self
https://bugzilla.suse.com/1012851	self
https://bugzilla.suse.com/1012852	self
https://bugzilla.suse.com/1012895	self
https://bugzilla.suse.com/1013038	self
https://bugzilla.suse.com/1013042	self
https://bugzilla.suse.com/1013531	self
https://bugzilla.suse.com/1013542	self
https://bugzilla.suse.com/1014454	self
https://bugzilla.suse.com/1014746	self
https://bugzilla.suse.com/1015878	self
https://bugzilla.suse.com/1017710	self
https://bugzilla.suse.com/1018446	self
https://bugzilla.suse.com/1019079	self
https://bugzilla.suse.com/1019783	self
https://bugzilla.suse.com/1021258	self
https://bugzilla.suse.com/821612	self
https://bugzilla.suse.com/824171	self
https://bugzilla.suse.com/914939	self
https://bugzilla.suse.com/929141	self
https://bugzilla.suse.com/935436	self
https://bugzilla.suse.com/956514	self
https://bugzilla.suse.com/961923	self
https://bugzilla.suse.com/966826	self
https://bugzilla.suse.com/967716	self
https://bugzilla.suse.com/969340	self
https://bugzilla.suse.com/973691	self
https://bugzilla.suse.com/979595	self
https://bugzilla.suse.com/987576	self
https://bugzilla.suse.com/989152	self
https://bugzilla.suse.com/989261	self
https://bugzilla.suse.com/991665	self
https://bugzilla.suse.com/992566	self
https://bugzilla.suse.com/992569	self
https://bugzilla.suse.com/992906	self
https://bugzilla.suse.com/992991	self
https://bugzilla.suse.com/993890	self
https://bugzilla.suse.com/993891	self
https://bugzilla.suse.com/994296	self
https://bugzilla.suse.com/994618	self
https://bugzilla.suse.com/994759	self
https://bugzilla.suse.com/995968	self
https://bugzilla.suse.com/996329	self
https://bugzilla.suse.com/996541	self
https://bugzilla.suse.com/996557	self
https://bugzilla.suse.com/997059	self
https://bugzilla.suse.com/997401	self
https://bugzilla.suse.com/997708	self
https://bugzilla.suse.com/998689	self
https://bugzilla.suse.com/999932	self
https://bugzilla.suse.com/999943	self
https://www.suse.com/security/cve/CVE-2004-0230/	self
https://www.suse.com/security/cve/CVE-2012-6704/	self
https://www.suse.com/security/cve/CVE-2015-1350/	self
https://www.suse.com/security/cve/CVE-2015-8956/	self
https://www.suse.com/security/cve/CVE-2015-8962/	self
https://www.suse.com/security/cve/CVE-2015-8964/	self
https://www.suse.com/security/cve/CVE-2015-8970/	self
https://www.suse.com/security/cve/CVE-2016-0823/	self
https://www.suse.com/security/cve/CVE-2016-10088/	self
https://www.suse.com/security/cve/CVE-2016-3841/	self
https://www.suse.com/security/cve/CVE-2016-6828/	self
https://www.suse.com/security/cve/CVE-2016-7042/	self
https://www.suse.com/security/cve/CVE-2016-7097/	self
https://www.suse.com/security/cve/CVE-2016-7117/	self
https://www.suse.com/security/cve/CVE-2016-7425/	self
https://www.suse.com/security/cve/CVE-2016-7910/	self
https://www.suse.com/security/cve/CVE-2016-7911/	self
https://www.suse.com/security/cve/CVE-2016-7916/	self
https://www.suse.com/security/cve/CVE-2016-8399/	self
https://www.suse.com/security/cve/CVE-2016-8632/	self
https://www.suse.com/security/cve/CVE-2016-8633/	self
https://www.suse.com/security/cve/CVE-2016-8646/	self
https://www.suse.com/security/cve/CVE-2016-9555/	self
https://www.suse.com/security/cve/CVE-2016-9685/	self
https://www.suse.com/security/cve/CVE-2016-9756/	self
https://www.suse.com/security/cve/CVE-2016-9793/	self
https://www.suse.com/security/cve/CVE-2017-5551/	self
https://www.suse.com/security/cve/CVE-2004-0230	external
https://bugzilla.suse.com/1184394	external
https://bugzilla.suse.com/1198501	external
https://bugzilla.suse.com/1206598	external
https://bugzilla.suse.com/969340	external
https://bugzilla.suse.com/989152	external
https://bugzilla.suse.com/992991	external
https://www.suse.com/security/cve/CVE-2012-6704	external
https://bugzilla.suse.com/1013531	external
https://bugzilla.suse.com/1013542	external
https://bugzilla.suse.com/1115893	external
https://www.suse.com/security/cve/CVE-2015-1350	external
https://bugzilla.suse.com/1052256	external
https://bugzilla.suse.com/914939	external
https://www.suse.com/security/cve/CVE-2015-8956	external
https://bugzilla.suse.com/1003925	external
https://www.suse.com/security/cve/CVE-2015-8962	external
https://bugzilla.suse.com/1010501	external
https://bugzilla.suse.com/1115893	external
https://www.suse.com/security/cve/CVE-2015-8964	external
https://bugzilla.suse.com/1010507	external
https://www.suse.com/security/cve/CVE-2015-8970	external
https://bugzilla.suse.com/1008374	external
https://bugzilla.suse.com/1008850	external
https://www.suse.com/security/cve/CVE-2016-0823	external
https://bugzilla.suse.com/987709	external
https://bugzilla.suse.com/994759	external
https://www.suse.com/security/cve/CVE-2016-10088	external
https://bugzilla.suse.com/1013604	external
https://bugzilla.suse.com/1014271	external
https://bugzilla.suse.com/1017710	external
https://bugzilla.suse.com/1019079	external
https://bugzilla.suse.com/1115893	external
https://www.suse.com/security/cve/CVE-2016-3841	external
https://bugzilla.suse.com/1052256	external
https://bugzilla.suse.com/1115893	external
https://bugzilla.suse.com/992566	external
https://bugzilla.suse.com/992569	external
https://www.suse.com/security/cve/CVE-2016-6828	external
https://bugzilla.suse.com/1052256	external
https://bugzilla.suse.com/994296	external
https://www.suse.com/security/cve/CVE-2016-7042	external
https://bugzilla.suse.com/1004517	external
https://www.suse.com/security/cve/CVE-2016-7097	external
https://bugzilla.suse.com/1021258	external
https://bugzilla.suse.com/1052256	external
https://bugzilla.suse.com/870618	external
https://bugzilla.suse.com/995968	external
https://www.suse.com/security/cve/CVE-2016-7117	external
https://bugzilla.suse.com/1003077	external
https://bugzilla.suse.com/1003253	external
https://bugzilla.suse.com/1057478	external
https://bugzilla.suse.com/1071943	external
https://www.suse.com/security/cve/CVE-2016-7425	external
https://bugzilla.suse.com/1115893	external
https://bugzilla.suse.com/999932	external
https://www.suse.com/security/cve/CVE-2016-7910	external
https://bugzilla.suse.com/1010716	external
https://bugzilla.suse.com/1115893	external
https://bugzilla.suse.com/1196722	external
https://www.suse.com/security/cve/CVE-2016-7911	external
https://bugzilla.suse.com/1010711	external
https://bugzilla.suse.com/1010713	external
https://bugzilla.suse.com/1115893	external
https://www.suse.com/security/cve/CVE-2016-7916	external
https://bugzilla.suse.com/1010467	external
https://www.suse.com/security/cve/CVE-2016-8399	external
https://bugzilla.suse.com/1014746	external
https://bugzilla.suse.com/1115893	external
https://www.suse.com/security/cve/CVE-2016-8632	external
https://bugzilla.suse.com/1008831	external
https://bugzilla.suse.com/1012852	external
https://bugzilla.suse.com/1115893	external
https://www.suse.com/security/cve/CVE-2016-8633	external
https://bugzilla.suse.com/1008833	external
https://www.suse.com/security/cve/CVE-2016-8646	external
https://bugzilla.suse.com/1010150	external
https://www.suse.com/security/cve/CVE-2016-9555	external
https://bugzilla.suse.com/1011685	external
https://bugzilla.suse.com/1012183	external
https://bugzilla.suse.com/1115893	external
https://www.suse.com/security/cve/CVE-2016-9685	external
https://bugzilla.suse.com/1012832	external
https://www.suse.com/security/cve/CVE-2016-9756	external
https://bugzilla.suse.com/1013038	external
https://www.suse.com/security/cve/CVE-2016-9793	external
https://bugzilla.suse.com/1013531	external
https://bugzilla.suse.com/1013542	external
https://bugzilla.suse.com/1115893	external
https://www.suse.com/security/cve/CVE-2017-5551	external
https://bugzilla.suse.com/1021258	external
https://bugzilla.suse.com/995968	external

JSON

To clipboard

Loading 2.1 MB of JSON…

CVE-2004-0230 (GCVE-0-2004-0230)

Vulnerability from cvelistv5 – Published: 2004-05-05 04:00 – Updated: 2024-08-08 00:10

Summary

TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to persistent TCP connections by repeatedly injecting a TCP RST packet, especially in protocols that use long-lived connections, such as BGP.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

29 references

URL	Tags
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://www.us-cert.gov/cas/techalerts/TA04-111A.html	third-party-advisoryx_refsource_CERT
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://marc.info/?l=bugtraq&m=108302060014745&w=2	mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/archive/1/449179/100…	vendor-advisoryx_refsource_HP
http://www.uniras.gov.uk/vuls/2004/236929/index.htm	x_refsource_MISC
https://docs.microsoft.com/en-us/security-updates…	vendor-advisoryx_refsource_MS
http://secunia.com/advisories/11440	third-party-advisoryx_refsource_SECUNIA
http://kb.juniper.net/JSA10638	x_refsource_CONFIRM
https://kc.mcafee.com/corporate/index?page=conten…	x_refsource_CONFIRM
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://www.kb.cert.org/vuls/id/415294	third-party-advisoryx_refsource_CERT-VN
http://marc.info/?l=bugtraq&m=108506952116653&w=2	vendor-advisoryx_refsource_HP
ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-20…	vendor-advisoryx_refsource_SCO
ftp://patches.sgi.com/support/free/security/advis…	vendor-advisoryx_refsource_SGI
https://docs.microsoft.com/en-us/security-updates…	vendor-advisoryx_refsource_MS
http://www.cisco.com/warp/public/707/cisco-sa-200…	vendor-advisoryx_refsource_CISCO
ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-20…	vendor-advisoryx_refsource_SCO
http://www.securityfocus.com/bid/10183	vdb-entryx_refsource_BID
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005…	vendor-advisoryx_refsource_SCO
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://www.osvdb.org/4030	vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/22341	third-party-advisoryx_refsource_SECUNIA
ftp://ftp.netbsd.org/pub/NetBSD/security/advisori…	vendor-advisoryx_refsource_NETBSD
http://www.vupen.com/english/advisories/2006/3983	vdb-entryx_refsource_VUPEN
http://secunia.com/advisories/11458	third-party-advisoryx_refsource_SECUNIA

Date Public

2004-04-20 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-08T00:10:03.682Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "oval:org.mitre.oval:def:2689",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2689"
          },
          {
            "name": "oval:org.mitre.oval:def:3508",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3508"
          },
          {
            "name": "TA04-111A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA04-111A.html"
          },
          {
            "name": "oval:org.mitre.oval:def:5711",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5711"
          },
          {
            "name": "20040425 Perl code exploting TCP not checking RST ACK.",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=108302060014745\u0026w=2"
          },
          {
            "name": "SSRT061264",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/449179/100/0/threaded"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.uniras.gov.uk/vuls/2004/236929/index.htm"
          },
          {
            "name": "MS06-064",
            "tags": [
              "vendor-advisory",
              "x_refsource_MS",
              "x_transferred"
            ],
            "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-064"
          },
          {
            "name": "11440",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/11440"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://kb.juniper.net/JSA10638"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10053"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html"
          },
          {
            "name": "VU#415294",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "http://www.kb.cert.org/vuls/id/415294"
          },
          {
            "name": "SSRT4696",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=108506952116653\u0026w=2"
          },
          {
            "name": "SCOSA-2005.9",
            "tags": [
              "vendor-advisory",
              "x_refsource_SCO",
              "x_transferred"
            ],
            "url": "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.9/SCOSA-2005.9.txt"
          },
          {
            "name": "20040403-01-A",
            "tags": [
              "vendor-advisory",
              "x_refsource_SGI",
              "x_transferred"
            ],
            "url": "ftp://patches.sgi.com/support/free/security/advisories/20040403-01-A.asc"
          },
          {
            "name": "MS05-019",
            "tags": [
              "vendor-advisory",
              "x_refsource_MS",
              "x_transferred"
            ],
            "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-019"
          },
          {
            "name": "HPSBST02161",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/449179/100/0/threaded"
          },
          {
            "name": "20040420 TCP Vulnerabilities in Multiple IOS-Based Cisco Products",
            "tags": [
              "vendor-advisory",
              "x_refsource_CISCO",
              "x_transferred"
            ],
            "url": "http://www.cisco.com/warp/public/707/cisco-sa-20040420-tcp-ios.shtml"
          },
          {
            "name": "SCOSA-2005.3",
            "tags": [
              "vendor-advisory",
              "x_refsource_SCO",
              "x_transferred"
            ],
            "url": "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.3/SCOSA-2005.3.txt"
          },
          {
            "name": "10183",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/10183"
          },
          {
            "name": "oval:org.mitre.oval:def:4791",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4791"
          },
          {
            "name": "SCOSA-2005.14",
            "tags": [
              "vendor-advisory",
              "x_refsource_SCO",
              "x_transferred"
            ],
            "url": "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.14/SCOSA-2005.14.txt"
          },
          {
            "name": "oval:org.mitre.oval:def:270",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A270"
          },
          {
            "name": "tcp-rst-dos(15886)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15886"
          },
          {
            "name": "4030",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/4030"
          },
          {
            "name": "22341",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22341"
          },
          {
            "name": "NetBSD-SA2004-006",
            "tags": [
              "vendor-advisory",
              "x_refsource_NETBSD",
              "x_transferred"
            ],
            "url": "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-006.txt.asc"
          },
          {
            "name": "ADV-2006-3983",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/3983"
          },
          {
            "name": "11458",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/11458"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2004-04-20T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to persistent TCP connections by repeatedly injecting a TCP RST packet, especially in protocols that use long-lived connections, such as BGP."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-19T14:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "oval:org.mitre.oval:def:2689",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2689"
        },
        {
          "name": "oval:org.mitre.oval:def:3508",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3508"
        },
        {
          "name": "TA04-111A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA04-111A.html"
        },
        {
          "name": "oval:org.mitre.oval:def:5711",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5711"
        },
        {
          "name": "20040425 Perl code exploting TCP not checking RST ACK.",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=108302060014745\u0026w=2"
        },
        {
          "name": "SSRT061264",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://www.securityfocus.com/archive/1/449179/100/0/threaded"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.uniras.gov.uk/vuls/2004/236929/index.htm"
        },
        {
          "name": "MS06-064",
          "tags": [
            "vendor-advisory",
            "x_refsource_MS"
          ],
          "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-064"
        },
        {
          "name": "11440",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/11440"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://kb.juniper.net/JSA10638"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10053"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html"
        },
        {
          "name": "VU#415294",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "http://www.kb.cert.org/vuls/id/415294"
        },
        {
          "name": "SSRT4696",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=108506952116653\u0026w=2"
        },
        {
          "name": "SCOSA-2005.9",
          "tags": [
            "vendor-advisory",
            "x_refsource_SCO"
          ],
          "url": "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.9/SCOSA-2005.9.txt"
        },
        {
          "name": "20040403-01-A",
          "tags": [
            "vendor-advisory",
            "x_refsource_SGI"
          ],
          "url": "ftp://patches.sgi.com/support/free/security/advisories/20040403-01-A.asc"
        },
        {
          "name": "MS05-019",
          "tags": [
            "vendor-advisory",
            "x_refsource_MS"
          ],
          "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-019"
        },
        {
          "name": "HPSBST02161",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://www.securityfocus.com/archive/1/449179/100/0/threaded"
        },
        {
          "name": "20040420 TCP Vulnerabilities in Multiple IOS-Based Cisco Products",
          "tags": [
            "vendor-advisory",
            "x_refsource_CISCO"
          ],
          "url": "http://www.cisco.com/warp/public/707/cisco-sa-20040420-tcp-ios.shtml"
        },
        {
          "name": "SCOSA-2005.3",
          "tags": [
            "vendor-advisory",
            "x_refsource_SCO"
          ],
          "url": "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.3/SCOSA-2005.3.txt"
        },
        {
          "name": "10183",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/10183"
        },
        {
          "name": "oval:org.mitre.oval:def:4791",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4791"
        },
        {
          "name": "SCOSA-2005.14",
          "tags": [
            "vendor-advisory",
            "x_refsource_SCO"
          ],
          "url": "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.14/SCOSA-2005.14.txt"
        },
        {
          "name": "oval:org.mitre.oval:def:270",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A270"
        },
        {
          "name": "tcp-rst-dos(15886)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15886"
        },
        {
          "name": "4030",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/4030"
        },
        {
          "name": "22341",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/22341"
        },
        {
          "name": "NetBSD-SA2004-006",
          "tags": [
            "vendor-advisory",
            "x_refsource_NETBSD"
          ],
          "url": "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-006.txt.asc"
        },
        {
          "name": "ADV-2006-3983",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/3983"
        },
        {
          "name": "11458",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/11458"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2004-0230",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to persistent TCP connections by repeatedly injecting a TCP RST packet, especially in protocols that use long-lived connections, such as BGP."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "oval:org.mitre.oval:def:2689",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2689"
            },
            {
              "name": "oval:org.mitre.oval:def:3508",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3508"
            },
            {
              "name": "TA04-111A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/cas/techalerts/TA04-111A.html"
            },
            {
              "name": "oval:org.mitre.oval:def:5711",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5711"
            },
            {
              "name": "20040425 Perl code exploting TCP not checking RST ACK.",
              "refsource": "BUGTRAQ",
              "url": "http://marc.info/?l=bugtraq\u0026m=108302060014745\u0026w=2"
            },
            {
              "name": "SSRT061264",
              "refsource": "HP",
              "url": "http://www.securityfocus.com/archive/1/449179/100/0/threaded"
            },
            {
              "name": "http://www.uniras.gov.uk/vuls/2004/236929/index.htm",
              "refsource": "MISC",
              "url": "http://www.uniras.gov.uk/vuls/2004/236929/index.htm"
            },
            {
              "name": "MS06-064",
              "refsource": "MS",
              "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-064"
            },
            {
              "name": "11440",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/11440"
            },
            {
              "name": "http://kb.juniper.net/JSA10638",
              "refsource": "CONFIRM",
              "url": "http://kb.juniper.net/JSA10638"
            },
            {
              "name": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10053",
              "refsource": "CONFIRM",
              "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10053"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html"
            },
            {
              "name": "VU#415294",
              "refsource": "CERT-VN",
              "url": "http://www.kb.cert.org/vuls/id/415294"
            },
            {
              "name": "SSRT4696",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=108506952116653\u0026w=2"
            },
            {
              "name": "SCOSA-2005.9",
              "refsource": "SCO",
              "url": "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.9/SCOSA-2005.9.txt"
            },
            {
              "name": "20040403-01-A",
              "refsource": "SGI",
              "url": "ftp://patches.sgi.com/support/free/security/advisories/20040403-01-A.asc"
            },
            {
              "name": "MS05-019",
              "refsource": "MS",
              "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-019"
            },
            {
              "name": "HPSBST02161",
              "refsource": "HP",
              "url": "http://www.securityfocus.com/archive/1/449179/100/0/threaded"
            },
            {
              "name": "20040420 TCP Vulnerabilities in Multiple IOS-Based Cisco Products",
              "refsource": "CISCO",
              "url": "http://www.cisco.com/warp/public/707/cisco-sa-20040420-tcp-ios.shtml"
            },
            {
              "name": "SCOSA-2005.3",
              "refsource": "SCO",
              "url": "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.3/SCOSA-2005.3.txt"
            },
            {
              "name": "10183",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/10183"
            },
            {
              "name": "oval:org.mitre.oval:def:4791",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4791"
            },
            {
              "name": "SCOSA-2005.14",
              "refsource": "SCO",
              "url": "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.14/SCOSA-2005.14.txt"
            },
            {
              "name": "oval:org.mitre.oval:def:270",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A270"
            },
            {
              "name": "tcp-rst-dos(15886)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15886"
            },
            {
              "name": "4030",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/4030"
            },
            {
              "name": "22341",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/22341"
            },
            {
              "name": "NetBSD-SA2004-006",
              "refsource": "NETBSD",
              "url": "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-006.txt.asc"
            },
            {
              "name": "ADV-2006-3983",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/3983"
            },
            {
              "name": "11458",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/11458"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2004-0230",
    "datePublished": "2004-05-05T04:00:00.000Z",
    "dateReserved": "2004-03-17T00:00:00.000Z",
    "dateUpdated": "2024-08-08T00:10:03.682Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2012-6704 (GCVE-0-2012-6704)

Vulnerability from cvelistv5 – Published: 2016-12-28 07:42 – Updated: 2024-08-06 21:36

Summary

The sock_setsockopt function in net/core/sock.c in the Linux kernel before 3.5 mishandles negative values of sk_sndbuf and sk_rcvbuf, which allows local users to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact by leveraging the CAP_NET_ADMIN capability for a crafted setsockopt system call with the (1) SO_SNDBUF or (2) SO_RCVBUF option.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

5 references

URL	Tags
http://www.securityfocus.com/bid/95135	vdb-entryx_refsource_BID
https://bugzilla.redhat.com/show_bug.cgi?id=1402024	x_refsource_CONFIRM
http://git.kernel.org/cgit/linux/kernel/git/torva…	x_refsource_CONFIRM
http://www.openwall.com/lists/oss-security/2016/12/03/1	mailing-listx_refsource_MLIST
https://github.com/torvalds/linux/commit/82981930…	x_refsource_CONFIRM

Date Public

2012-04-26 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T21:36:02.175Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "95135",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/95135"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402024"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=82981930125abfd39d7c8378a9cfdf5e1be2002b"
          },
          {
            "name": "[oss-security] 20161202 Re: CVE Request: Linux: signed overflows for SO_{SND|RCV}BUFFORCE",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/12/03/1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/82981930125abfd39d7c8378a9cfdf5e1be2002b"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-04-26T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The sock_setsockopt function in net/core/sock.c in the Linux kernel before 3.5 mishandles negative values of sk_sndbuf and sk_rcvbuf, which allows local users to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact by leveraging the CAP_NET_ADMIN capability for a crafted setsockopt system call with the (1) SO_SNDBUF or (2) SO_RCVBUF option."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-12-29T10:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "95135",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/95135"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402024"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=82981930125abfd39d7c8378a9cfdf5e1be2002b"
        },
        {
          "name": "[oss-security] 20161202 Re: CVE Request: Linux: signed overflows for SO_{SND|RCV}BUFFORCE",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/12/03/1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/torvalds/linux/commit/82981930125abfd39d7c8378a9cfdf5e1be2002b"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-6704",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The sock_setsockopt function in net/core/sock.c in the Linux kernel before 3.5 mishandles negative values of sk_sndbuf and sk_rcvbuf, which allows local users to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact by leveraging the CAP_NET_ADMIN capability for a crafted setsockopt system call with the (1) SO_SNDBUF or (2) SO_RCVBUF option."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "95135",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/95135"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1402024",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402024"
            },
            {
              "name": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=82981930125abfd39d7c8378a9cfdf5e1be2002b",
              "refsource": "CONFIRM",
              "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=82981930125abfd39d7c8378a9cfdf5e1be2002b"
            },
            {
              "name": "[oss-security] 20161202 Re: CVE Request: Linux: signed overflows for SO_{SND|RCV}BUFFORCE",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/12/03/1"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/82981930125abfd39d7c8378a9cfdf5e1be2002b",
              "refsource": "CONFIRM",
              "url": "https://github.com/torvalds/linux/commit/82981930125abfd39d7c8378a9cfdf5e1be2002b"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-6704",
    "datePublished": "2016-12-28T07:42:00.000Z",
    "dateReserved": "2016-12-02T00:00:00.000Z",
    "dateUpdated": "2024-08-06T21:36:02.175Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2015-1350 (GCVE-0-2015-1350)

Vulnerability from cvelistv5 – Published: 2016-05-02 10:00 – Updated: 2024-08-06 04:40

Summary

The VFS subsystem in the Linux kernel 3.x provides an incomplete set of requirements for setattr operations that underspecifies removing extended privilege attributes, which allows local users to cause a denial of service (capability stripping) via a failed invocation of a system call, as demonstrated by using chown to remove a capability from the ping or Wireshark dumpcap program.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

5 references

URL	Tags
https://bugzilla.redhat.com/show_bug.cgi?id=1185139	x_refsource_CONFIRM
http://www.securityfocus.com/bid/76075	vdb-entryx_refsource_BID
http://marc.info/?l=linux-kernel&m=142153722930533&w=2	mailing-listx_refsource_MLIST
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug…	x_refsource_MISC
http://www.openwall.com/lists/oss-security/2015/01/24/5	mailing-listx_refsource_MLIST

Date Public

2015-01-17 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T04:40:18.594Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1185139"
          },
          {
            "name": "76075",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/76075"
          },
          {
            "name": "[linux-kernel] 20150117 [RFC PATCH RESEND] vfs: Move security_inode_killpriv() after permission checks",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=linux-kernel\u0026m=142153722930533\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=770492"
          },
          {
            "name": "[oss-security] 20150124 Re: CVE Request: Linux kernel - Denial of service in notify_change for xattrs.",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2015/01/24/5"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-01-17T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The VFS subsystem in the Linux kernel 3.x provides an incomplete set of requirements for setattr operations that underspecifies removing extended privilege attributes, which allows local users to cause a denial of service (capability stripping) via a failed invocation of a system call, as demonstrated by using chown to remove a capability from the ping or Wireshark dumpcap program."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-02-01T10:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1185139"
        },
        {
          "name": "76075",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/76075"
        },
        {
          "name": "[linux-kernel] 20150117 [RFC PATCH RESEND] vfs: Move security_inode_killpriv() after permission checks",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://marc.info/?l=linux-kernel\u0026m=142153722930533\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=770492"
        },
        {
          "name": "[oss-security] 20150124 Re: CVE Request: Linux kernel - Denial of service in notify_change for xattrs.",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2015/01/24/5"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2015-1350",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The VFS subsystem in the Linux kernel 3.x provides an incomplete set of requirements for setattr operations that underspecifies removing extended privilege attributes, which allows local users to cause a denial of service (capability stripping) via a failed invocation of a system call, as demonstrated by using chown to remove a capability from the ping or Wireshark dumpcap program."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1185139",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1185139"
            },
            {
              "name": "76075",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/76075"
            },
            {
              "name": "[linux-kernel] 20150117 [RFC PATCH RESEND] vfs: Move security_inode_killpriv() after permission checks",
              "refsource": "MLIST",
              "url": "http://marc.info/?l=linux-kernel\u0026m=142153722930533\u0026w=2"
            },
            {
              "name": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=770492",
              "refsource": "MISC",
              "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=770492"
            },
            {
              "name": "[oss-security] 20150124 Re: CVE Request: Linux kernel - Denial of service in notify_change for xattrs.",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2015/01/24/5"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2015-1350",
    "datePublished": "2016-05-02T10:00:00.000Z",
    "dateReserved": "2015-01-24T00:00:00.000Z",
    "dateUpdated": "2024-08-06T04:40:18.594Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2015-8956 (GCVE-0-2015-8956)

Vulnerability from cvelistv5 – Published: 2016-10-10 10:00 – Updated: 2024-08-06 08:36

Summary

The rfcomm_sock_bind function in net/bluetooth/rfcomm/sock.c in the Linux kernel before 4.2 allows local users to obtain sensitive information or cause a denial of service (NULL pointer dereference) via vectors involving a bind system call on a Bluetooth RFCOMM socket.

Severity

No CVSS data available.

CWE

Assigner

google_android Google root

References

6 references

URL	Tags
http://source.android.com/security/bulletin/2016-…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2016-2584.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2016-2574.html	vendor-advisoryx_refsource_REDHAT
http://git.kernel.org/cgit/linux/kernel/git/torva…	x_refsource_CONFIRM
http://www.securityfocus.com/bid/93326	vdb-entryx_refsource_BID
https://github.com/torvalds/linux/commit/951b6a07…	x_refsource_CONFIRM

Date Public

2015-05-06 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T08:36:31.038Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://source.android.com/security/bulletin/2016-10-01.html"
          },
          {
            "name": "RHSA-2016:2584",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2584.html"
          },
          {
            "name": "RHSA-2016:2574",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2574.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=951b6a0717db97ce420547222647bcc40bf1eacd"
          },
          {
            "name": "93326",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/93326"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/951b6a0717db97ce420547222647bcc40bf1eacd"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-05-06T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The rfcomm_sock_bind function in net/bluetooth/rfcomm/sock.c in the Linux kernel before 4.2 allows local users to obtain sensitive information or cause a denial of service (NULL pointer dereference) via vectors involving a bind system call on a Bluetooth RFCOMM socket."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6",
        "shortName": "google_android"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://source.android.com/security/bulletin/2016-10-01.html"
        },
        {
          "name": "RHSA-2016:2584",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2584.html"
        },
        {
          "name": "RHSA-2016:2574",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2574.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=951b6a0717db97ce420547222647bcc40bf1eacd"
        },
        {
          "name": "93326",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/93326"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/torvalds/linux/commit/951b6a0717db97ce420547222647bcc40bf1eacd"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@android.com",
          "ID": "CVE-2015-8956",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The rfcomm_sock_bind function in net/bluetooth/rfcomm/sock.c in the Linux kernel before 4.2 allows local users to obtain sensitive information or cause a denial of service (NULL pointer dereference) via vectors involving a bind system call on a Bluetooth RFCOMM socket."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://source.android.com/security/bulletin/2016-10-01.html",
              "refsource": "CONFIRM",
              "url": "http://source.android.com/security/bulletin/2016-10-01.html"
            },
            {
              "name": "RHSA-2016:2584",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2584.html"
            },
            {
              "name": "RHSA-2016:2574",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2574.html"
            },
            {
              "name": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=951b6a0717db97ce420547222647bcc40bf1eacd",
              "refsource": "CONFIRM",
              "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=951b6a0717db97ce420547222647bcc40bf1eacd"
            },
            {
              "name": "93326",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/93326"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/951b6a0717db97ce420547222647bcc40bf1eacd",
              "refsource": "CONFIRM",
              "url": "https://github.com/torvalds/linux/commit/951b6a0717db97ce420547222647bcc40bf1eacd"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6",
    "assignerShortName": "google_android",
    "cveId": "CVE-2015-8956",
    "datePublished": "2016-10-10T10:00:00.000Z",
    "dateReserved": "2016-08-30T00:00:00.000Z",
    "dateUpdated": "2024-08-06T08:36:31.038Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2015-8962 (GCVE-0-2015-8962)

Vulnerability from cvelistv5 – Published: 2016-11-16 04:49 – Updated: 2024-08-06 08:36

Summary

Double free vulnerability in the sg_common_write function in drivers/scsi/sg.c in the Linux kernel before 4.4 allows local users to gain privileges or cause a denial of service (memory corruption and system crash) by detaching a device during an SG_IO ioctl call.

Severity

No CVSS data available.

CWE

Assigner

google_android Google root

References

4 references

URL	Tags
http://git.kernel.org/cgit/linux/kernel/git/torva…	x_refsource_CONFIRM
https://source.android.com/security/bulletin/2016…	x_refsource_CONFIRM
https://github.com/torvalds/linux/commit/f3951a37…	x_refsource_CONFIRM
http://www.securityfocus.com/bid/94187	vdb-entryx_refsource_BID

Date Public

2016-04-27 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T08:36:30.694Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f3951a3709ff50990bf3e188c27d346792103432"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://source.android.com/security/bulletin/2016-11-01.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/f3951a3709ff50990bf3e188c27d346792103432"
          },
          {
            "name": "94187",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/94187"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-04-27T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Double free vulnerability in the sg_common_write function in drivers/scsi/sg.c in the Linux kernel before 4.4 allows local users to gain privileges or cause a denial of service (memory corruption and system crash) by detaching a device during an SG_IO ioctl call."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-01-12T20:57:01.000Z",
        "orgId": "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6",
        "shortName": "google_android"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f3951a3709ff50990bf3e188c27d346792103432"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://source.android.com/security/bulletin/2016-11-01.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/torvalds/linux/commit/f3951a3709ff50990bf3e188c27d346792103432"
        },
        {
          "name": "94187",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/94187"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@android.com",
          "ID": "CVE-2015-8962",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Double free vulnerability in the sg_common_write function in drivers/scsi/sg.c in the Linux kernel before 4.4 allows local users to gain privileges or cause a denial of service (memory corruption and system crash) by detaching a device during an SG_IO ioctl call."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f3951a3709ff50990bf3e188c27d346792103432",
              "refsource": "CONFIRM",
              "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f3951a3709ff50990bf3e188c27d346792103432"
            },
            {
              "name": "https://source.android.com/security/bulletin/2016-11-01.html",
              "refsource": "CONFIRM",
              "url": "https://source.android.com/security/bulletin/2016-11-01.html"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/f3951a3709ff50990bf3e188c27d346792103432",
              "refsource": "CONFIRM",
              "url": "https://github.com/torvalds/linux/commit/f3951a3709ff50990bf3e188c27d346792103432"
            },
            {
              "name": "94187",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/94187"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6",
    "assignerShortName": "google_android",
    "cveId": "CVE-2015-8962",
    "datePublished": "2016-11-16T04:49:00.000Z",
    "dateReserved": "2016-10-03T00:00:00.000Z",
    "dateUpdated": "2024-08-06T08:36:30.694Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2015-8964 (GCVE-0-2015-8964)

Vulnerability from cvelistv5 – Published: 2016-11-16 04:49 – Updated: 2024-08-06 08:36

Summary

The tty_set_termios_ldisc function in drivers/tty/tty_ldisc.c in the Linux kernel before 4.5 allows local users to obtain sensitive information from kernel memory by reading a tty data structure.

Severity

No CVSS data available.

CWE

Assigner

google_android Google root

References

4 references

URL	Tags
http://source.android.com/security/bulletin/2016-…	x_refsource_CONFIRM
http://git.kernel.org/cgit/linux/kernel/git/torva…	x_refsource_CONFIRM
https://github.com/torvalds/linux/commit/dd42bf11…	x_refsource_CONFIRM
http://www.securityfocus.com/bid/94138	vdb-entryx_refsource_BID

Date Public

2016-04-27 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T08:36:30.376Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://source.android.com/security/bulletin/2016-11-01.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=dd42bf1197144ede075a9d4793123f7689e164bc"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/dd42bf1197144ede075a9d4793123f7689e164bc"
          },
          {
            "name": "94138",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/94138"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-04-27T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The tty_set_termios_ldisc function in drivers/tty/tty_ldisc.c in the Linux kernel before 4.5 allows local users to obtain sensitive information from kernel memory by reading a tty data structure."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-11-25T19:57:01.000Z",
        "orgId": "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6",
        "shortName": "google_android"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://source.android.com/security/bulletin/2016-11-01.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=dd42bf1197144ede075a9d4793123f7689e164bc"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/torvalds/linux/commit/dd42bf1197144ede075a9d4793123f7689e164bc"
        },
        {
          "name": "94138",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/94138"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@android.com",
          "ID": "CVE-2015-8964",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The tty_set_termios_ldisc function in drivers/tty/tty_ldisc.c in the Linux kernel before 4.5 allows local users to obtain sensitive information from kernel memory by reading a tty data structure."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://source.android.com/security/bulletin/2016-11-01.html",
              "refsource": "CONFIRM",
              "url": "http://source.android.com/security/bulletin/2016-11-01.html"
            },
            {
              "name": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=dd42bf1197144ede075a9d4793123f7689e164bc",
              "refsource": "CONFIRM",
              "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=dd42bf1197144ede075a9d4793123f7689e164bc"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/dd42bf1197144ede075a9d4793123f7689e164bc",
              "refsource": "CONFIRM",
              "url": "https://github.com/torvalds/linux/commit/dd42bf1197144ede075a9d4793123f7689e164bc"
            },
            {
              "name": "94138",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/94138"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6",
    "assignerShortName": "google_android",
    "cveId": "CVE-2015-8964",
    "datePublished": "2016-11-16T04:49:00.000Z",
    "dateReserved": "2016-10-03T00:00:00.000Z",
    "dateUpdated": "2024-08-06T08:36:30.376Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2015-8970 (GCVE-0-2015-8970)

Vulnerability from cvelistv5 – Published: 2016-11-28 03:01 – Updated: 2024-08-06 08:36

Summary

crypto/algif_skcipher.c in the Linux kernel before 4.4.2 does not verify that a setkey operation has been performed on an AF_ALG socket before an accept system call is processed, which allows local users to cause a denial of service (NULL pointer dereference and system crash) via a crafted application that does not supply a key, related to the lrw_crypt function in crypto/lrw.c.

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

11 references

URL	Tags
https://access.redhat.com/errata/RHSA-2017:2437	vendor-advisoryx_refsource_REDHAT
http://www.kernel.org/pub/linux/kernel/v4.x/Chang…	x_refsource_CONFIRM
http://git.kernel.org/cgit/linux/kernel/git/torva…	x_refsource_CONFIRM
https://access.redhat.com/errata/RHSA-2017:2444	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2017:2077	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2017:1842	vendor-advisoryx_refsource_REDHAT
https://github.com/torvalds/linux/commit/dd504589…	x_refsource_CONFIRM
http://www.openwall.com/lists/oss-security/2016/11/04/3	mailing-listx_refsource_MLIST
https://bugzilla.redhat.com/show_bug.cgi?id=1386286	x_refsource_CONFIRM
http://www.securityfocus.com/bid/94217	vdb-entryx_refsource_BID
https://groups.google.com/forum/#%21msg/syzkaller…	x_refsource_CONFIRM

Date Public

2016-02-17 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T08:36:30.422Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2437",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2437"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=dd504589577d8e8e70f51f997ad487a4cb6c026f"
          },
          {
            "name": "RHSA-2017:2444",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2444"
          },
          {
            "name": "RHSA-2017:2077",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2077"
          },
          {
            "name": "RHSA-2017:1842",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1842"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/dd504589577d8e8e70f51f997ad487a4cb6c026f"
          },
          {
            "name": "[oss-security] 20161104 Re: CVE request -- linux kernel: crypto: GPF in lrw_crypt caused by null-deref",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/11/04/3"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1386286"
          },
          {
            "name": "94217",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/94217"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://groups.google.com/forum/#%21msg/syzkaller/frb2XrB5aWk/xCXzkIBcDAAJ"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-02-17T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "crypto/algif_skcipher.c in the Linux kernel before 4.4.2 does not verify that a setkey operation has been performed on an AF_ALG socket before an accept system call is processed, which allows local users to cause a denial of service (NULL pointer dereference and system crash) via a crafted application that does not supply a key, related to the lrw_crypt function in crypto/lrw.c."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2017:2437",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2437"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=dd504589577d8e8e70f51f997ad487a4cb6c026f"
        },
        {
          "name": "RHSA-2017:2444",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2444"
        },
        {
          "name": "RHSA-2017:2077",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2077"
        },
        {
          "name": "RHSA-2017:1842",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1842"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/torvalds/linux/commit/dd504589577d8e8e70f51f997ad487a4cb6c026f"
        },
        {
          "name": "[oss-security] 20161104 Re: CVE request -- linux kernel: crypto: GPF in lrw_crypt caused by null-deref",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/11/04/3"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1386286"
        },
        {
          "name": "94217",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/94217"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://groups.google.com/forum/#%21msg/syzkaller/frb2XrB5aWk/xCXzkIBcDAAJ"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2015-8970",
    "datePublished": "2016-11-28T03:01:00.000Z",
    "dateReserved": "2016-11-04T00:00:00.000Z",
    "dateUpdated": "2024-08-06T08:36:30.422Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-0823 (GCVE-0-2016-0823)

Vulnerability from cvelistv5 – Published: 2016-03-12 21:00 – Updated: 2024-08-05 22:30

Summary

The pagemap_open function in fs/proc/task_mmu.c in the Linux kernel before 3.19.3, as used in Android 6.0.1 before 2016-03-01, allows local users to obtain sensitive physical-address information by reading a pagemap file, aka Android internal bug 25739721.

Severity

No CVSS data available.

CWE

Assigner

google_android Google root

References

6 references

URL	Tags
http://www.securityfocus.com/bid/84265	vdb-entryx_refsource_BID
http://googleprojectzero.blogspot.com/2015/03/exp…	x_refsource_MISC
http://www.kernel.org/pub/linux/kernel/v3.x/Chang…	x_refsource_CONFIRM
http://source.android.com/security/bulletin/2016-…	x_refsource_CONFIRM
http://git.kernel.org/cgit/linux/kernel/git/torva…	x_refsource_CONFIRM
https://github.com/torvalds/linux/commit/ab676b7d…	x_refsource_CONFIRM

Date Public

2015-03-26 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T22:30:05.021Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "84265",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/84265"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://googleprojectzero.blogspot.com/2015/03/exploiting-dram-rowhammer-bug-to-gain.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.19.3"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://source.android.com/security/bulletin/2016-03-01.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ab676b7d6fbf4b294bf198fb27ade5b0e865c7ce"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/ab676b7d6fbf4b294bf198fb27ade5b0e865c7ce"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-03-26T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The pagemap_open function in fs/proc/task_mmu.c in the Linux kernel before 3.19.3, as used in Android 6.0.1 before 2016-03-01, allows local users to obtain sensitive physical-address information by reading a pagemap file, aka Android internal bug 25739721."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-11-25T19:57:01.000Z",
        "orgId": "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6",
        "shortName": "google_android"
      },
      "references": [
        {
          "name": "84265",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/84265"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://googleprojectzero.blogspot.com/2015/03/exploiting-dram-rowhammer-bug-to-gain.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.19.3"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://source.android.com/security/bulletin/2016-03-01.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ab676b7d6fbf4b294bf198fb27ade5b0e865c7ce"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/torvalds/linux/commit/ab676b7d6fbf4b294bf198fb27ade5b0e865c7ce"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@android.com",
          "ID": "CVE-2016-0823",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The pagemap_open function in fs/proc/task_mmu.c in the Linux kernel before 3.19.3, as used in Android 6.0.1 before 2016-03-01, allows local users to obtain sensitive physical-address information by reading a pagemap file, aka Android internal bug 25739721."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "84265",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/84265"
            },
            {
              "name": "http://googleprojectzero.blogspot.com/2015/03/exploiting-dram-rowhammer-bug-to-gain.html",
              "refsource": "MISC",
              "url": "http://googleprojectzero.blogspot.com/2015/03/exploiting-dram-rowhammer-bug-to-gain.html"
            },
            {
              "name": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.19.3",
              "refsource": "CONFIRM",
              "url": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.19.3"
            },
            {
              "name": "http://source.android.com/security/bulletin/2016-03-01.html",
              "refsource": "CONFIRM",
              "url": "http://source.android.com/security/bulletin/2016-03-01.html"
            },
            {
              "name": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ab676b7d6fbf4b294bf198fb27ade5b0e865c7ce",
              "refsource": "CONFIRM",
              "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ab676b7d6fbf4b294bf198fb27ade5b0e865c7ce"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/ab676b7d6fbf4b294bf198fb27ade5b0e865c7ce",
              "refsource": "CONFIRM",
              "url": "https://github.com/torvalds/linux/commit/ab676b7d6fbf4b294bf198fb27ade5b0e865c7ce"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6",
    "assignerShortName": "google_android",
    "cveId": "CVE-2016-0823",
    "datePublished": "2016-03-12T21:00:00.000Z",
    "dateReserved": "2015-12-16T00:00:00.000Z",
    "dateUpdated": "2024-08-05T22:30:05.021Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-10088 (GCVE-0-2016-10088)

Vulnerability from cvelistv5 – Published: 2016-12-30 18:00 – Updated: 2024-08-06 03:07

Summary

The sg implementation in the Linux kernel through 4.9 does not properly restrict write operations in situations where the KERNEL_DS option is set, which allows local users to read or write to arbitrary kernel memory locations or cause a denial of service (use-after-free) by leveraging access to a /dev/sg device, related to block/bsg.c and drivers/scsi/sg.c. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-9576.

Severity

No CVSS data available.

CWE

Assigner

debian mitre root

References

9 references

URL	Tags
http://www.securitytracker.com/id/1037538	vdb-entryx_refsource_SECTRACK
https://access.redhat.com/errata/RHSA-2017:2669	vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/bid/95169	vdb-entryx_refsource_BID
http://rhn.redhat.com/errata/RHSA-2017-0817.html	vendor-advisoryx_refsource_REDHAT
http://www.openwall.com/lists/oss-security/2016/12/30/1	mailing-listx_refsource_MLIST
https://access.redhat.com/errata/RHSA-2017:2077	vendor-advisoryx_refsource_REDHAT
http://git.kernel.org/cgit/linux/kernel/git/torva…	x_refsource_CONFIRM
https://access.redhat.com/errata/RHSA-2017:1842	vendor-advisoryx_refsource_REDHAT
https://github.com/torvalds/linux/commit/128394ef…	x_refsource_CONFIRM

Date Public

2016-12-30 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T03:07:32.095Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1037538",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037538"
          },
          {
            "name": "RHSA-2017:2669",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2669"
          },
          {
            "name": "95169",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/95169"
          },
          {
            "name": "RHSA-2017:0817",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0817.html"
          },
          {
            "name": "[oss-security] 20161230 Re: Linux Kernel use-after-free in SCSI generic device interface",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/12/30/1"
          },
          {
            "name": "RHSA-2017:2077",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2077"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=128394eff343fc6d2f32172f03e24829539c5835"
          },
          {
            "name": "RHSA-2017:1842",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1842"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/128394eff343fc6d2f32172f03e24829539c5835"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-12-30T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The sg implementation in the Linux kernel through 4.9 does not properly restrict write operations in situations where the KERNEL_DS option is set, which allows local users to read or write to arbitrary kernel memory locations or cause a denial of service (use-after-free) by leveraging access to a /dev/sg device, related to block/bsg.c and drivers/scsi/sg.c.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-9576."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "79363d38-fa19-49d1-9214-5f28da3f3ac5",
        "shortName": "debian"
      },
      "references": [
        {
          "name": "1037538",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037538"
        },
        {
          "name": "RHSA-2017:2669",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2669"
        },
        {
          "name": "95169",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/95169"
        },
        {
          "name": "RHSA-2017:0817",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0817.html"
        },
        {
          "name": "[oss-security] 20161230 Re: Linux Kernel use-after-free in SCSI generic device interface",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/12/30/1"
        },
        {
          "name": "RHSA-2017:2077",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2077"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=128394eff343fc6d2f32172f03e24829539c5835"
        },
        {
          "name": "RHSA-2017:1842",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1842"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/torvalds/linux/commit/128394eff343fc6d2f32172f03e24829539c5835"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@debian.org",
          "ID": "CVE-2016-10088",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The sg implementation in the Linux kernel through 4.9 does not properly restrict write operations in situations where the KERNEL_DS option is set, which allows local users to read or write to arbitrary kernel memory locations or cause a denial of service (use-after-free) by leveraging access to a /dev/sg device, related to block/bsg.c and drivers/scsi/sg.c.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-9576."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1037538",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037538"
            },
            {
              "name": "RHSA-2017:2669",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2669"
            },
            {
              "name": "95169",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/95169"
            },
            {
              "name": "RHSA-2017:0817",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0817.html"
            },
            {
              "name": "[oss-security] 20161230 Re: Linux Kernel use-after-free in SCSI generic device interface",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/12/30/1"
            },
            {
              "name": "RHSA-2017:2077",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2077"
            },
            {
              "name": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=128394eff343fc6d2f32172f03e24829539c5835",
              "refsource": "CONFIRM",
              "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=128394eff343fc6d2f32172f03e24829539c5835"
            },
            {
              "name": "RHSA-2017:1842",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1842"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/128394eff343fc6d2f32172f03e24829539c5835",
              "refsource": "CONFIRM",
              "url": "https://github.com/torvalds/linux/commit/128394eff343fc6d2f32172f03e24829539c5835"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "79363d38-fa19-49d1-9214-5f28da3f3ac5",
    "assignerShortName": "debian",
    "cveId": "CVE-2016-10088",
    "datePublished": "2016-12-30T18:00:00.000Z",
    "dateReserved": "2016-12-30T00:00:00.000Z",
    "dateUpdated": "2024-08-06T03:07:32.095Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-3841 (GCVE-0-2016-3841)

Vulnerability from cvelistv5 – Published: 2016-08-06 20:00 – Updated: 2024-08-06 00:10

Summary

The IPv6 stack in the Linux kernel before 4.3.3 mishandles options data, which allows local users to gain privileges or cause a denial of service (use-after-free and system crash) via a crafted sendmsg system call.

Severity

No CVSS data available.

CWE

Assigner

google_android Google root

References

9 references

URL	Tags
http://source.android.com/security/bulletin/2016-…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2016-0855.html	vendor-advisoryx_refsource_REDHAT
https://github.com/torvalds/linux/commit/45f6fad8…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2016-2584.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2016-2574.html	vendor-advisoryx_refsource_REDHAT
http://www.kernel.org/pub/linux/kernel/v4.x/Chang…	x_refsource_CONFIRM
http://www.securityfocus.com/bid/92227	vdb-entryx_refsource_BID
http://git.kernel.org/cgit/linux/kernel/git/torva…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2016-2695.html	vendor-advisoryx_refsource_REDHAT

Date Public

2015-12-14 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T00:10:31.094Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://source.android.com/security/bulletin/2016-08-01.html"
          },
          {
            "name": "RHSA-2016:0855",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0855.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/45f6fad84cc305103b28d73482b344d7f5b76f39"
          },
          {
            "name": "RHSA-2016:2584",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2584.html"
          },
          {
            "name": "RHSA-2016:2574",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2574.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.3.3"
          },
          {
            "name": "92227",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/92227"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=45f6fad84cc305103b28d73482b344d7f5b76f39"
          },
          {
            "name": "RHSA-2016:2695",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2695.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-12-14T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The IPv6 stack in the Linux kernel before 4.3.3 mishandles options data, which allows local users to gain privileges or cause a denial of service (use-after-free and system crash) via a crafted sendmsg system call."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6",
        "shortName": "google_android"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://source.android.com/security/bulletin/2016-08-01.html"
        },
        {
          "name": "RHSA-2016:0855",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0855.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/torvalds/linux/commit/45f6fad84cc305103b28d73482b344d7f5b76f39"
        },
        {
          "name": "RHSA-2016:2584",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2584.html"
        },
        {
          "name": "RHSA-2016:2574",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2574.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.3.3"
        },
        {
          "name": "92227",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/92227"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=45f6fad84cc305103b28d73482b344d7f5b76f39"
        },
        {
          "name": "RHSA-2016:2695",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2695.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@android.com",
          "ID": "CVE-2016-3841",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The IPv6 stack in the Linux kernel before 4.3.3 mishandles options data, which allows local users to gain privileges or cause a denial of service (use-after-free and system crash) via a crafted sendmsg system call."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://source.android.com/security/bulletin/2016-08-01.html",
              "refsource": "CONFIRM",
              "url": "http://source.android.com/security/bulletin/2016-08-01.html"
            },
            {
              "name": "RHSA-2016:0855",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0855.html"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/45f6fad84cc305103b28d73482b344d7f5b76f39",
              "refsource": "CONFIRM",
              "url": "https://github.com/torvalds/linux/commit/45f6fad84cc305103b28d73482b344d7f5b76f39"
            },
            {
              "name": "RHSA-2016:2584",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2584.html"
            },
            {
              "name": "RHSA-2016:2574",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2574.html"
            },
            {
              "name": "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.3.3",
              "refsource": "CONFIRM",
              "url": "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.3.3"
            },
            {
              "name": "92227",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/92227"
            },
            {
              "name": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=45f6fad84cc305103b28d73482b344d7f5b76f39",
              "refsource": "CONFIRM",
              "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=45f6fad84cc305103b28d73482b344d7f5b76f39"
            },
            {
              "name": "RHSA-2016:2695",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2695.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6",
    "assignerShortName": "google_android",
    "cveId": "CVE-2016-3841",
    "datePublished": "2016-08-06T20:00:00.000Z",
    "dateReserved": "2016-03-30T00:00:00.000Z",
    "dateUpdated": "2024-08-06T00:10:31.094Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

SUSE-SU-2017:0494-1

CVE-2004-0230 (GCVE-0-2004-0230)

CVE-2012-6704 (GCVE-0-2012-6704)

CVE-2015-1350 (GCVE-0-2015-1350)

CVE-2015-8956 (GCVE-0-2015-8956)

CVE-2015-8962 (GCVE-0-2015-8962)

CVE-2015-8964 (GCVE-0-2015-8964)

CVE-2015-8970 (GCVE-0-2015-8970)

CVE-2016-0823 (GCVE-0-2016-0823)

CVE-2016-10088 (GCVE-0-2016-10088)

CVE-2016-3841 (GCVE-0-2016-3841)

Tags

Sightings

Nomenclature

Related by attack behaviour