var-201604-0129
Vulnerability from variot

Xen and the Linux kernel through 4.5.x do not properly suppress hugetlbfs support in x86 PV guests, which allows local PV guest OS users to cause a denial of service (guest OS crash) by attempting to access a hugetlbfs mapped area. Xen is an open source virtual machine monitor product. Xen's PV virtual machine has a security vulnerability when enabling hugetlbfs support, allowing an attacker to exploit this vulnerability to trigger an infinite loop of error pages for a denial of service attack. Xen is prone to a denial-of-service vulnerability. An attacker can exploit this issue to crash the kernel, resulting in a denial-of-service condition. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512

Debian Security Advisory DSA-3607-1 security@debian.org https://www.debian.org/security/ Salvatore Bonaccorso June 28, 2016 https://www.debian.org/security/faq

Package : linux CVE ID : CVE-2015-7515 CVE-2016-0821 CVE-2016-1237 CVE-2016-1583 CVE-2016-2117 CVE-2016-2143 CVE-2016-2184 CVE-2016-2185 CVE-2016-2186 CVE-2016-2187 CVE-2016-3070 CVE-2016-3134 CVE-2016-3136 CVE-2016-3137 CVE-2016-3138 CVE-2016-3140 CVE-2016-3156 CVE-2016-3157 CVE-2016-3672 CVE-2016-3951 CVE-2016-3955 CVE-2016-3961 CVE-2016-4470 CVE-2016-4482 CVE-2016-4485 CVE-2016-4486 CVE-2016-4565 CVE-2016-4569 CVE-2016-4578 CVE-2016-4580 CVE-2016-4581 CVE-2016-4805 CVE-2016-4913 CVE-2016-4997 CVE-2016-4998 CVE-2016-5243 CVE-2016-5244

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks.

CVE-2015-7515, CVE-2016-2184, CVE-2016-2185, CVE-2016-2186, CVE-2016-2187, CVE-2016-3136, CVE-2016-3137, CVE-2016-3138, CVE-2016-3140

Ralf Spenneberg of OpenSource Security reported that various USB
drivers do not sufficiently validate USB descriptors.  This
allowed a physically present user with a specially designed USB
device to cause a denial of service (crash).

CVE-2016-0821

Solar Designer noted that the list 'poisoning' feature, intended
to mitigate the effects of bugs in list manipulation in the
kernel, used poison values within the range of virtual addresses
that can be allocated by user processes.

CVE-2016-1237

David Sinquin discovered that nfsd does not check permissions when
setting ACLs, allowing users to grant themselves permissions to a
file by setting the ACL.

CVE-2016-1583

Jann Horn of Google Project Zero reported that the eCryptfs
filesystem could be used together with the proc filesystem to
cause a kernel stack overflow.  If the ecryptfs-utils package is
installed, local users could exploit this, via the
mount.ecryptfs_private program, for denial of service (crash) or
possibly for privilege escalation.

CVE-2016-2117

Justin Yackoski of Cryptonite discovered that the Atheros L2
ethernet driver incorrectly enables scatter/gather I/O. A remote
attacker could take advantage of this flaw to obtain potentially
sensitive information from kernel memory.

CVE-2016-3070

Jan Stancek of Red Hat discovered a local denial of service
vulnerability in AIO handling.

CVE-2016-3134

The Google Project Zero team found that the netfilter subsystem does
not sufficiently validate filter table entries. A user with the
CAP_NET_ADMIN capability could use this for denial of service
(crash) or possibly for privilege escalation. Debian disables
unprivileged user namespaces by default, if locally enabled with the
kernel.unprivileged_userns_clone sysctl, this allows privilege
escalation.

CVE-2016-3156

Solar Designer discovered that the IPv4 implementation in the Linux
kernel did not perform the destruction of inet device objects
properly. An attacker in a guest OS could use this to cause a denial
of service (networking outage) in the host OS.

CVE-2016-3157 / XSA-171

Andy Lutomirski discovered that the x86_64 (amd64) task switching
implementation did not correctly update the I/O permission level
when running as a Xen paravirtual (PV) guest.

CVE-2016-3672

Hector Marco and Ismael Ripoll noted that it was possible to disable
Address Space Layout Randomisation (ASLR) for x86_32 (i386) programs
by removing the stack resource limit. This made it easier for local
users to exploit security flaws in programs that have the setuid or
setgid flag set.

CVE-2016-3951

It was discovered that the cdc_ncm driver would free memory
prematurely if certain errors occurred during its initialisation. 
This allowed a physically present user with a specially designed
USB device to cause a denial of service (crash) or possibly to
escalate their privileges.

CVE-2016-3955

Ignat Korchagin reported that the usbip subsystem did not check
the length of data received for a USB buffer.  This allowed denial
of service (crash) or privilege escalation on a system configured
as a usbip client, by the usbip server or by an attacker able to
impersonate it over the network.  A system configured as a usbip
server might be similarly vulnerable to physically present users.

CVE-2016-3961 / XSA-174

Vitaly Kuznetsov of Red Hat discovered that Linux allowed the use of
hugetlbfs on x86 (i386 and amd64) systems even when running as a Xen
paravirtualised (PV) guest, although Xen does not support huge
pages.

CVE-2016-4470

David Howells of Red Hat discovered that a local user can trigger a
flaw in the Linux kernel's handling of key lookups in the keychain
subsystem, leading to a denial of service (crash) or possibly to
privilege escalation.

CVE-2016-4482, CVE-2016-4485, CVE-2016-4486, CVE-2016-4569, CVE-2016-4578, CVE-2016-4580, CVE-2016-5243, CVE-2016-5244

Kangjie Lu reported that the USB devio, llc, rtnetlink, ALSA
timer, x25, tipc, and rds facilities leaked information from the
kernel stack.

CVE-2016-4565

Jann Horn of Google Project Zero reported that various components
in the InfiniBand stack implemented unusual semantics for the
write() operation.  On a system with InfiniBand drivers loaded,
local users could use this for denial of service or privilege
escalation.

CVE-2016-4581

Tycho Andersen discovered that in some situations the Linux kernel
did not handle propagated mounts correctly. A local user can take
advantage of this flaw to cause a denial of service (system crash).

CVE-2016-4805

Baozeng Ding discovered a use-after-free in the generic PPP layer in
the Linux kernel. A local user can take advantage of this flaw to
cause a denial of service (system crash), or potentially escalate
their privileges.

CVE-2016-4913

Al Viro found that the ISO9660 filesystem implementation did not
correctly count the length of certain invalid name entries. 
Reading a directory containing such name entries would leak
information from kernel memory.  Users permitted to mount disks or
disk images could use this to obtain sensitive information.

CVE-2016-4997 / CVE-2016-4998

Jesse Hertz and Tim Newsham discovered that missing input sanitising
in Netfilter socket handling may result in denial of service. Debian
disables unprivileged user namespaces by default, if locally enabled
with the kernel.unprivileged_userns_clone sysctl, this also allows
privilege escalation.

For the stable distribution (jessie), these problems have been fixed in version 3.16.7-ckt25-2+deb8u2.

We recommend that you upgrade your linux packages.

Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org -----BEGIN PGP SIGNATURE----- Version: GnuPG v1

iQIcBAEBCgAGBQJXckE+AAoJEAVMuPMTQ89EbVoP/2hxxkUZ6hmCNzqfAdVglANg xzBg+dWsE/1Q8gl2OiMrxV8Dy/v9+3Xl2lI0Lldx0zDRSqImvxzCm6Fhhye/OiRD BWeVdeHFdUNTv6MQQ9qFH6ykbz4TQhKPBbbCN0LbbsFa2I1LQNirvMM0fNu915U+ JgMP0JtkvbLZNzT8tg2hR+KkHaZJp+HIZsQD4a8dCPNZVrQJNZt6FFfE0M01IQSw KnjAmzp9om9CAfrTPyu2bnHXa9ktmU2zOeat267TKzSB8zw1/AlHDpf/sODd6uTi lTeInri1NNc2r2VS5mAUWwTUHOHPLPS2PTH+Dpd0vla1qcbUFArfFONgICH3VnYs kqL/Y5ZlhzVC+YXOUDdw+poTSYL/sxTYU+8OImSXbVrhAOT0xTlXX80fqjZJ+lvM 1edtWoZQcpQQ7hZNq919LOrd770e3hkfFHTogwLQ3ROADxGGpOCcsySPDS1Xl2bX b+7HAagYfYknzF2UyZjmc4zn3BtGYYeHkKAWfeuj3U6V5JV2wut/vTHaSgYt4Jue Efy3745ZOZGVcj0UJ6YhN7BNY/kpsfeaiTMcismkU0ywKaINY8rX2GjdX68xmGaa Cs//sGmMSbTNb7JjqdHWY5GJG+q6qUzSyPsSiNfv8F+EsPW/u5PEl/VEo9nl2uvm bXgDVs7M9codkftA8ma7 =LawE -----END PGP SIGNATURE----- . ========================================================================== Ubuntu Security Notice USN-3002-1 June 10, 2016

linux-lts-wily vulnerabilities

A security issue affects these releases of Ubuntu and its derivatives:

  • Ubuntu 14.04 LTS

Summary:

Several security issues were fixed in the kernel. (CVE-2016-2117)

Jann Horn discovered that eCryptfs improperly attempted to use the mmap() handler of a lower filesystem that did not implement one, causing a recursive page fault to occur. (CVE-2016-1583)

Jason A. Donenfeld discovered multiple out-of-bounds reads in the OZMO USB over wifi device drivers in the Linux kernel. (CVE-2016-3672)

Andrey Konovalov discovered that the CDC Network Control Model USB driver in the Linux kernel did not cancel work events queued if a later error occurred, resulting in a use-after-free. (CVE-2016-4485)

Kangjie Lu discovered an information leak in the routing netlink socket interface (rtnetlink) implementation in the Linux kernel. A local unprivileged attacker could use this to possibly gain administrative privileges on systems where InifiniBand related kernel modules are loaded. (CVE-2016-4581)

Update instructions:

The problem can be corrected by updating your system to the following package versions:

Ubuntu 14.04 LTS: linux-image-4.2.0-38-generic 4.2.0-38.45~14.04.1 linux-image-4.2.0-38-generic-lpae 4.2.0-38.45~14.04.1 linux-image-4.2.0-38-lowlatency 4.2.0-38.45~14.04.1 linux-image-4.2.0-38-powerpc-e500mc 4.2.0-38.45~14.04.1 linux-image-4.2.0-38-powerpc-smp 4.2.0-38.45~14.04.1 linux-image-4.2.0-38-powerpc64-emb 4.2.0-38.45~14.04.1 linux-image-4.2.0-38-powerpc64-smp 4.2.0-38.45~14.04.1

After a standard system update you need to reboot your computer to make all the necessary changes.

ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well.

References: http://www.ubuntu.com/usn/usn-3002-1 CVE-2015-4004, CVE-2016-1583, CVE-2016-2117, CVE-2016-2187, CVE-2016-3672, CVE-2016-3951, CVE-2016-3955, CVE-2016-3961, CVE-2016-4485, CVE-2016-4486, CVE-2016-4565, CVE-2016-4581

Package Information: https://launchpad.net/ubuntu/+source/linux-lts-wily/4.2.0-38.45~14.04.1

. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 14.04 LTS for Ubuntu 12.04 LTS.

It was discovered that the compression handling code in the Advanced Linux Sound Architecture (ALSA) subsystem in the Linux kernel did not properly check for an integer overflow. (CVE-2014-9904)

Kirill A

Show details on source website

To clipboard 

{
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "configurations": {
      "@id": "https://www.variotdbs.pl/ref/configurations"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-201604-0129",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "ubuntu linux",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "canonical",
        "version": "15.10"
      },
      {
        "model": "ubuntu linux",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "canonical",
        "version": "14.04"
      },
      {
        "model": "ubuntu linux",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "canonical",
        "version": "16.04"
      },
      {
        "model": "xen",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "xen",
        "version": "4.5.3"
      },
      {
        "model": "pv",
        "scope": null,
        "trust": 0.6,
        "vendor": "xen",
        "version": null
      },
      {
        "model": "xen",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "xen",
        "version": "4.5.3"
      },
      {
        "model": "linux sparc",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "debian",
        "version": "6.0"
      },
      {
        "model": "linux s/390",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "debian",
        "version": "6.0"
      },
      {
        "model": "linux powerpc",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "debian",
        "version": "6.0"
      },
      {
        "model": "linux mips",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "debian",
        "version": "6.0"
      },
      {
        "model": "linux ia-64",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "debian",
        "version": "6.0"
      },
      {
        "model": "linux ia-32",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "debian",
        "version": "6.0"
      },
      {
        "model": "linux arm",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "debian",
        "version": "6.0"
      },
      {
        "model": "linux amd64",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "debian",
        "version": "6.0"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2016-02390"
      },
      {
        "db": "BID",
        "id": "86068"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201604-330"
      },
      {
        "db": "NVD",
        "id": "CVE-2016-3961"
      }
    ]
  },
  "configurations": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/configurations#",
      "children": {
        "@container": "@list"
      },
      "cpe_match": {
        "@container": "@list"
      },
      "data": {
        "@container": "@list"
      },
      "nodes": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:xen:xen:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "4.5.3",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2016-3961"
      }
    ]
  },
  "credits": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/credits#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Ubuntu",
    "sources": [
      {
        "db": "PACKETSTORM",
        "id": "137419"
      },
      {
        "db": "PACKETSTORM",
        "id": "138270"
      },
      {
        "db": "PACKETSTORM",
        "id": "137417"
      },
      {
        "db": "PACKETSTORM",
        "id": "139673"
      },
      {
        "db": "PACKETSTORM",
        "id": "139678"
      },
      {
        "db": "PACKETSTORM",
        "id": "137418"
      }
    ],
    "trust": 0.6
  },
  "cve": "CVE-2016-3961",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "acInsufInfo": false,
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "author": "NVD",
            "availabilityImpact": "PARTIAL",
            "baseScore": 2.1,
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 3.9,
            "impactScore": 2.9,
            "integrityImpact": "NONE",
            "obtainAllPrivilege": false,
            "obtainOtherPrivilege": false,
            "obtainUserPrivilege": false,
            "severity": "LOW",
            "trust": 1.0,
            "userInteractionRequired": false,
            "vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "version": "2.0"
          },
          {
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "author": "CNVD",
            "availabilityImpact": "PARTIAL",
            "baseScore": 2.1,
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 3.9,
            "id": "CNVD-2016-02390",
            "impactScore": 2.9,
            "integrityImpact": "NONE",
            "severity": "LOW",
            "trust": 0.6,
            "vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "version": "2.0"
          },
          {
            "acInsufInfo": null,
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "author": "VULMON",
            "availabilityImpact": "PARTIAL",
            "baseScore": 2.1,
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 3.9,
            "id": "CVE-2016-3961",
            "impactScore": 2.9,
            "integrityImpact": "NONE",
            "obtainAllPrivilege": null,
            "obtainOtherPrivilege": null,
            "obtainUserPrivilege": null,
            "severity": "LOW",
            "trust": 0.1,
            "userInteractionRequired": null,
            "vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "version": "2.0"
          }
        ],
        "cvssV3": [
          {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "author": "NVD",
            "availabilityImpact": "HIGH",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 1.8,
            "impactScore": 3.6,
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "trust": 1.0,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          }
        ],
        "severity": [
          {
            "author": "NVD",
            "id": "CVE-2016-3961",
            "trust": 1.0,
            "value": "MEDIUM"
          },
          {
            "author": "CNVD",
            "id": "CNVD-2016-02390",
            "trust": 0.6,
            "value": "LOW"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-201604-330",
            "trust": 0.6,
            "value": "LOW"
          },
          {
            "author": "VULMON",
            "id": "CVE-2016-3961",
            "trust": 0.1,
            "value": "LOW"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2016-02390"
      },
      {
        "db": "VULMON",
        "id": "CVE-2016-3961"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201604-330"
      },
      {
        "db": "NVD",
        "id": "CVE-2016-3961"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Xen and the Linux kernel through 4.5.x do not properly suppress hugetlbfs support in x86 PV guests, which allows local PV guest OS users to cause a denial of service (guest OS crash) by attempting to access a hugetlbfs mapped area. Xen is an open source virtual machine monitor product. Xen\u0027s PV virtual machine has a security vulnerability when enabling hugetlbfs support, allowing an attacker to exploit this vulnerability to trigger an infinite loop of error pages for a denial of service attack. Xen is prone to a denial-of-service vulnerability. \nAn attacker can exploit this issue to crash the kernel, resulting in a denial-of-service condition. -----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA512\n\n- -------------------------------------------------------------------------\nDebian Security Advisory DSA-3607-1                   security@debian.org\nhttps://www.debian.org/security/                     Salvatore Bonaccorso\nJune 28, 2016                         https://www.debian.org/security/faq\n- -------------------------------------------------------------------------\n\nPackage        : linux\nCVE ID         : CVE-2015-7515 CVE-2016-0821 CVE-2016-1237 CVE-2016-1583\n                 CVE-2016-2117 CVE-2016-2143 CVE-2016-2184 CVE-2016-2185\n                 CVE-2016-2186 CVE-2016-2187 CVE-2016-3070 CVE-2016-3134\n                 CVE-2016-3136 CVE-2016-3137 CVE-2016-3138 CVE-2016-3140\n                 CVE-2016-3156 CVE-2016-3157 CVE-2016-3672 CVE-2016-3951\n                 CVE-2016-3955 CVE-2016-3961 CVE-2016-4470 CVE-2016-4482\n                 CVE-2016-4485 CVE-2016-4486 CVE-2016-4565 CVE-2016-4569\n                 CVE-2016-4578 CVE-2016-4580 CVE-2016-4581 CVE-2016-4805\n                 CVE-2016-4913 CVE-2016-4997 CVE-2016-4998 CVE-2016-5243\n                 CVE-2016-5244\n\nSeveral vulnerabilities have been discovered in the Linux kernel that\nmay lead to a privilege escalation, denial of service or information\nleaks. \n\nCVE-2015-7515, CVE-2016-2184, CVE-2016-2185, CVE-2016-2186,\nCVE-2016-2187, CVE-2016-3136, CVE-2016-3137, CVE-2016-3138,\nCVE-2016-3140\n\n    Ralf Spenneberg of OpenSource Security reported that various USB\n    drivers do not sufficiently validate USB descriptors.  This\n    allowed a physically present user with a specially designed USB\n    device to cause a denial of service (crash). \n\nCVE-2016-0821\n\n    Solar Designer noted that the list \u0027poisoning\u0027 feature, intended\n    to mitigate the effects of bugs in list manipulation in the\n    kernel, used poison values within the range of virtual addresses\n    that can be allocated by user processes. \n\nCVE-2016-1237\n\n    David Sinquin discovered that nfsd does not check permissions when\n    setting ACLs, allowing users to grant themselves permissions to a\n    file by setting the ACL. \n\nCVE-2016-1583\n\n    Jann Horn of Google Project Zero reported that the eCryptfs\n    filesystem could be used together with the proc filesystem to\n    cause a kernel stack overflow.  If the ecryptfs-utils package is\n    installed, local users could exploit this, via the\n    mount.ecryptfs_private program, for denial of service (crash) or\n    possibly for privilege escalation. \n\nCVE-2016-2117\n\n    Justin Yackoski of Cryptonite discovered that the Atheros L2\n    ethernet driver incorrectly enables scatter/gather I/O. A remote\n    attacker could take advantage of this flaw to obtain potentially\n    sensitive information from kernel memory. \n\nCVE-2016-3070\n\n    Jan Stancek of Red Hat discovered a local denial of service\n    vulnerability in AIO handling. \n\nCVE-2016-3134\n\n    The Google Project Zero team found that the netfilter subsystem does\n    not sufficiently validate filter table entries. A user with the\n    CAP_NET_ADMIN capability could use this for denial of service\n    (crash) or possibly for privilege escalation. Debian disables\n    unprivileged user namespaces by default, if locally enabled with the\n    kernel.unprivileged_userns_clone sysctl, this allows privilege\n    escalation. \n\nCVE-2016-3156\n\n    Solar Designer discovered that the IPv4 implementation in the Linux\n    kernel did not perform the destruction of inet device objects\n    properly. An attacker in a guest OS could use this to cause a denial\n    of service (networking outage) in the host OS. \n\nCVE-2016-3157 / XSA-171\n\n    Andy Lutomirski discovered that the x86_64 (amd64) task switching\n    implementation did not correctly update the I/O permission level\n    when running as a Xen paravirtual (PV) guest. \n\nCVE-2016-3672\n\n    Hector Marco and Ismael Ripoll noted that it was possible to disable\n    Address Space Layout Randomisation (ASLR) for x86_32 (i386) programs\n    by removing the stack resource limit. This made it easier for local\n    users to exploit security flaws in programs that have the setuid or\n    setgid flag set. \n\nCVE-2016-3951\n\n    It was discovered that the cdc_ncm driver would free memory\n    prematurely if certain errors occurred during its initialisation. \n    This allowed a physically present user with a specially designed\n    USB device to cause a denial of service (crash) or possibly to\n    escalate their privileges. \n\nCVE-2016-3955\n\n    Ignat Korchagin reported that the usbip subsystem did not check\n    the length of data received for a USB buffer.  This allowed denial\n    of service (crash) or privilege escalation on a system configured\n    as a usbip client, by the usbip server or by an attacker able to\n    impersonate it over the network.  A system configured as a usbip\n    server might be similarly vulnerable to physically present users. \n\nCVE-2016-3961 / XSA-174\n\n    Vitaly Kuznetsov of Red Hat discovered that Linux allowed the use of\n    hugetlbfs on x86 (i386 and amd64) systems even when running as a Xen\n    paravirtualised (PV) guest, although Xen does not support huge\n    pages. \n\nCVE-2016-4470\n\n    David Howells of Red Hat discovered that a local user can trigger a\n    flaw in the Linux kernel\u0027s handling of key lookups in the keychain\n    subsystem, leading to a denial of service (crash) or possibly to\n    privilege escalation. \n\nCVE-2016-4482, CVE-2016-4485, CVE-2016-4486, CVE-2016-4569,\nCVE-2016-4578, CVE-2016-4580, CVE-2016-5243, CVE-2016-5244\n\n    Kangjie Lu reported that the USB devio, llc, rtnetlink, ALSA\n    timer, x25, tipc, and rds facilities leaked information from the\n    kernel stack. \n\nCVE-2016-4565\n\n    Jann Horn of Google Project Zero reported that various components\n    in the InfiniBand stack implemented unusual semantics for the\n    write() operation.  On a system with InfiniBand drivers loaded,\n    local users could use this for denial of service or privilege\n    escalation. \n\nCVE-2016-4581\n\n    Tycho Andersen discovered that in some situations the Linux kernel\n    did not handle propagated mounts correctly. A local user can take\n    advantage of this flaw to cause a denial of service (system crash). \n\nCVE-2016-4805\n\n    Baozeng Ding discovered a use-after-free in the generic PPP layer in\n    the Linux kernel. A local user can take advantage of this flaw to\n    cause a denial of service (system crash), or potentially escalate\n    their privileges. \n\nCVE-2016-4913\n\n    Al Viro found that the ISO9660 filesystem implementation did not\n    correctly count the length of certain invalid name entries. \n    Reading a directory containing such name entries would leak\n    information from kernel memory.  Users permitted to mount disks or\n    disk images could use this to obtain sensitive information. \n\nCVE-2016-4997 / CVE-2016-4998\n\n    Jesse Hertz and Tim Newsham discovered that missing input sanitising\n    in Netfilter socket handling may result in denial of service. Debian\n    disables unprivileged user namespaces by default, if locally enabled\n    with the kernel.unprivileged_userns_clone sysctl, this also allows\n    privilege escalation. \n\nFor the stable distribution (jessie), these problems have been fixed in\nversion 3.16.7-ckt25-2+deb8u2. \n\nWe recommend that you upgrade your linux packages. \n\nFurther information about Debian Security Advisories, how to apply\nthese updates to your system and frequently asked questions can be\nfound at: https://www.debian.org/security/\n\nMailing list: debian-security-announce@lists.debian.org\n-----BEGIN PGP SIGNATURE-----\nVersion: GnuPG v1\n\niQIcBAEBCgAGBQJXckE+AAoJEAVMuPMTQ89EbVoP/2hxxkUZ6hmCNzqfAdVglANg\nxzBg+dWsE/1Q8gl2OiMrxV8Dy/v9+3Xl2lI0Lldx0zDRSqImvxzCm6Fhhye/OiRD\nBWeVdeHFdUNTv6MQQ9qFH6ykbz4TQhKPBbbCN0LbbsFa2I1LQNirvMM0fNu915U+\nJgMP0JtkvbLZNzT8tg2hR+KkHaZJp+HIZsQD4a8dCPNZVrQJNZt6FFfE0M01IQSw\nKnjAmzp9om9CAfrTPyu2bnHXa9ktmU2zOeat267TKzSB8zw1/AlHDpf/sODd6uTi\nlTeInri1NNc2r2VS5mAUWwTUHOHPLPS2PTH+Dpd0vla1qcbUFArfFONgICH3VnYs\nkqL/Y5ZlhzVC+YXOUDdw+poTSYL/sxTYU+8OImSXbVrhAOT0xTlXX80fqjZJ+lvM\n1edtWoZQcpQQ7hZNq919LOrd770e3hkfFHTogwLQ3ROADxGGpOCcsySPDS1Xl2bX\nb+7HAagYfYknzF2UyZjmc4zn3BtGYYeHkKAWfeuj3U6V5JV2wut/vTHaSgYt4Jue\nEfy3745ZOZGVcj0UJ6YhN7BNY/kpsfeaiTMcismkU0ywKaINY8rX2GjdX68xmGaa\nCs//sGmMSbTNb7JjqdHWY5GJG+q6qUzSyPsSiNfv8F+EsPW/u5PEl/VEo9nl2uvm\nbXgDVs7M9codkftA8ma7\n=LawE\n-----END PGP SIGNATURE-----\n. ==========================================================================\nUbuntu Security Notice USN-3002-1\nJune 10, 2016\n\nlinux-lts-wily vulnerabilities\n==========================================================================\n\nA security issue affects these releases of Ubuntu and its derivatives:\n\n- Ubuntu 14.04 LTS\n\nSummary:\n\nSeveral security issues were fixed in the kernel. \n(CVE-2016-2117)\n\nJann Horn discovered that eCryptfs improperly attempted to use the mmap()\nhandler of a lower filesystem that did not implement one, causing a\nrecursive page fault to occur. (CVE-2016-1583)\n\nJason A. Donenfeld discovered multiple out-of-bounds reads in the OZMO USB\nover wifi device drivers in the Linux kernel. (CVE-2016-3672)\n\nAndrey Konovalov discovered that the CDC Network Control Model USB driver\nin the Linux kernel did not cancel work events queued if a later error\noccurred, resulting in a use-after-free. \n(CVE-2016-4485)\n\nKangjie Lu discovered an information leak in the routing netlink socket\ninterface (rtnetlink) implementation in the Linux kernel. A local unprivileged\nattacker could use this to possibly gain administrative privileges on\nsystems where InifiniBand related kernel modules are loaded. (CVE-2016-4581)\n\nUpdate instructions:\n\nThe problem can be corrected by updating your system to the following\npackage versions:\n\nUbuntu 14.04 LTS:\n  linux-image-4.2.0-38-generic    4.2.0-38.45~14.04.1\n  linux-image-4.2.0-38-generic-lpae  4.2.0-38.45~14.04.1\n  linux-image-4.2.0-38-lowlatency  4.2.0-38.45~14.04.1\n  linux-image-4.2.0-38-powerpc-e500mc  4.2.0-38.45~14.04.1\n  linux-image-4.2.0-38-powerpc-smp  4.2.0-38.45~14.04.1\n  linux-image-4.2.0-38-powerpc64-emb  4.2.0-38.45~14.04.1\n  linux-image-4.2.0-38-powerpc64-smp  4.2.0-38.45~14.04.1\n\nAfter a standard system update you need to reboot your computer to make\nall the necessary changes. \n\nATTENTION: Due to an unavoidable ABI change the kernel updates have\nbeen given a new version number, which requires you to recompile and\nreinstall all third party kernel modules you might have installed. \nUnless you manually uninstalled the standard kernel metapackages\n(e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual,\nlinux-powerpc), a standard system upgrade will automatically perform\nthis as well. \n\nReferences:\n  http://www.ubuntu.com/usn/usn-3002-1\n  CVE-2015-4004, CVE-2016-1583, CVE-2016-2117, CVE-2016-2187,\n  CVE-2016-3672, CVE-2016-3951, CVE-2016-3955, CVE-2016-3961,\n  CVE-2016-4485, CVE-2016-4486, CVE-2016-4565, CVE-2016-4581\n\nPackage Information:\n  https://launchpad.net/ubuntu/+source/linux-lts-wily/4.2.0-38.45~14.04.1\n\n\n. This update provides the corresponding updates for the Linux\nHardware Enablement (HWE) kernel from Ubuntu 14.04 LTS for Ubuntu\n12.04 LTS. \n\nIt was discovered that the compression handling code in the Advanced Linux\nSound Architecture (ALSA) subsystem in the Linux kernel did not properly\ncheck for an integer overflow. (CVE-2014-9904)\n\nKirill A",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2016-3961"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2016-02390"
      },
      {
        "db": "BID",
        "id": "86068"
      },
      {
        "db": "VULMON",
        "id": "CVE-2016-3961"
      },
      {
        "db": "PACKETSTORM",
        "id": "137419"
      },
      {
        "db": "PACKETSTORM",
        "id": "138270"
      },
      {
        "db": "PACKETSTORM",
        "id": "137696"
      },
      {
        "db": "PACKETSTORM",
        "id": "137417"
      },
      {
        "db": "PACKETSTORM",
        "id": "139673"
      },
      {
        "db": "PACKETSTORM",
        "id": "139678"
      },
      {
        "db": "PACKETSTORM",
        "id": "137418"
      }
    ],
    "trust": 2.43
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2016-3961",
        "trust": 3.3
      },
      {
        "db": "SECTRACK",
        "id": "1035569",
        "trust": 1.7
      },
      {
        "db": "BID",
        "id": "86068",
        "trust": 1.4
      },
      {
        "db": "OPENWALL",
        "id": "OSS-SECURITY/2016/04/14/2",
        "trust": 1.2
      },
      {
        "db": "CNVD",
        "id": "CNVD-2016-02390",
        "trust": 0.6
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201604-330",
        "trust": 0.6
      },
      {
        "db": "VULMON",
        "id": "CVE-2016-3961",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "137419",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "138270",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "137696",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "137417",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "139673",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "139678",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "137418",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2016-02390"
      },
      {
        "db": "VULMON",
        "id": "CVE-2016-3961"
      },
      {
        "db": "BID",
        "id": "86068"
      },
      {
        "db": "PACKETSTORM",
        "id": "137419"
      },
      {
        "db": "PACKETSTORM",
        "id": "138270"
      },
      {
        "db": "PACKETSTORM",
        "id": "137696"
      },
      {
        "db": "PACKETSTORM",
        "id": "137417"
      },
      {
        "db": "PACKETSTORM",
        "id": "139673"
      },
      {
        "db": "PACKETSTORM",
        "id": "139678"
      },
      {
        "db": "PACKETSTORM",
        "id": "137418"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201604-330"
      },
      {
        "db": "NVD",
        "id": "CVE-2016-3961"
      }
    ]
  },
  "id": "VAR-201604-0129",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2016-02390"
      }
    ],
    "trust": 1.6
  },
  "iot_taxonomy": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "category": [
          "Network device"
        ],
        "sub_category": null,
        "trust": 0.6
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2016-02390"
      }
    ]
  },
  "last_update_date": "2024-07-23T19:59:26.192000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": "Patch for XenPV Virtual Machine Denial of Service Vulnerability",
        "trust": 0.6,
        "url": "https://www.cnvd.org.cn/patchinfo/show/74420"
      },
      {
        "title": "Xen  and Linux kernel Remediation measures for denial of service vulnerabilities",
        "trust": 0.6,
        "url": "http://www.cnnvd.org.cn/web/xxk/bdxqbyid.tag?id=60973"
      },
      {
        "title": "Red Hat: CVE-2016-3961",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_cve_database\u0026qid=cve-2016-3961"
      },
      {
        "title": "Ubuntu Security Notice: linux vulnerabilities",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=ubuntu_security_notice\u0026qid=usn-3127-1"
      },
      {
        "title": "Ubuntu Security Notice: linux-lts-trusty vulnerabilities",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=ubuntu_security_notice\u0026qid=usn-3127-2"
      },
      {
        "title": "Ubuntu Security Notice: linux-ti-omap4 vulnerabilities",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=ubuntu_security_notice\u0026qid=usn-3050-1"
      },
      {
        "title": "Ubuntu Security Notice: linux vulnerabilities",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=ubuntu_security_notice\u0026qid=usn-3049-1"
      },
      {
        "title": "Brocade Security Advisories: BSA-2017-204",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=brocade_security_advisories\u0026qid=426d0c0eff7642baadbe130aeadad5b8"
      },
      {
        "title": "Ubuntu Security Notice: linux vulnerabilities",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=ubuntu_security_notice\u0026qid=usn-3006-1"
      },
      {
        "title": "Ubuntu Security Notice: linux-lts-xenial vulnerabilities",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=ubuntu_security_notice\u0026qid=usn-3005-1"
      },
      {
        "title": "Ubuntu Security Notice: linux-raspi2 vulnerabilities",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=ubuntu_security_notice\u0026qid=usn-3007-1"
      },
      {
        "title": "Ubuntu Security Notice: linux vulnerabilities",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=ubuntu_security_notice\u0026qid=usn-3003-1"
      },
      {
        "title": "Ubuntu Security Notice: linux-lts-vivid vulnerabilities",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=ubuntu_security_notice\u0026qid=usn-3001-1"
      },
      {
        "title": "Ubuntu Security Notice: linux-lts-wily vulnerabilities",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=ubuntu_security_notice\u0026qid=usn-3002-1"
      },
      {
        "title": "Ubuntu Security Notice: linux-raspi2 vulnerabilities",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=ubuntu_security_notice\u0026qid=usn-3004-1"
      },
      {
        "title": "Amazon Linux AMI: ALAS-2016-703",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=amazon_linux_ami\u0026qid=alas-2016-703"
      },
      {
        "title": "Debian Security Advisories: DSA-3607-1 linux -- security update",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=debian_security_advisories\u0026qid=130ea7817d6c997c442bd2ad39a2da75"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2016-02390"
      },
      {
        "db": "VULMON",
        "id": "CVE-2016-3961"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201604-330"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "CWE-20",
        "trust": 1.0
      }
    ],
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2016-3961"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 1.7,
        "url": "http://www.securitytracker.com/id/1035569"
      },
      {
        "trust": 1.7,
        "url": "http://xenbits.xen.org/xsa/advisory-174.html"
      },
      {
        "trust": 1.7,
        "url": "http://xenbits.xen.org/xsa/xsa174.patch"
      },
      {
        "trust": 1.2,
        "url": "http://www.openwall.com/lists/oss-security/2016/04/14/2"
      },
      {
        "trust": 1.2,
        "url": "http://www.ubuntu.com/usn/usn-3002-1"
      },
      {
        "trust": 1.2,
        "url": "http://www.ubuntu.com/usn/usn-3003-1"
      },
      {
        "trust": 1.2,
        "url": "http://www.ubuntu.com/usn/usn-3004-1"
      },
      {
        "trust": 1.2,
        "url": "http://www.ubuntu.com/usn/usn-3050-1"
      },
      {
        "trust": 1.1,
        "url": "http://www.debian.org/security/2016/dsa-3607"
      },
      {
        "trust": 1.1,
        "url": "http://www.securityfocus.com/bid/86068"
      },
      {
        "trust": 1.1,
        "url": "http://www.ubuntu.com/usn/usn-3001-1"
      },
      {
        "trust": 1.1,
        "url": "http://www.ubuntu.com/usn/usn-3005-1"
      },
      {
        "trust": 1.1,
        "url": "http://www.ubuntu.com/usn/usn-3006-1"
      },
      {
        "trust": 1.1,
        "url": "http://www.ubuntu.com/usn/usn-3007-1"
      },
      {
        "trust": 1.1,
        "url": "http://www.ubuntu.com/usn/usn-3049-1"
      },
      {
        "trust": 0.7,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2016-3961"
      },
      {
        "trust": 0.4,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2016-3955"
      },
      {
        "trust": 0.4,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2016-2117"
      },
      {
        "trust": 0.4,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2016-4486"
      },
      {
        "trust": 0.4,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2016-4565"
      },
      {
        "trust": 0.4,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2016-3672"
      },
      {
        "trust": 0.4,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2016-4485"
      },
      {
        "trust": 0.4,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2016-1583"
      },
      {
        "trust": 0.4,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2016-2187"
      },
      {
        "trust": 0.4,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2016-3951"
      },
      {
        "trust": 0.3,
        "url": "http://www.xen.org/"
      },
      {
        "trust": 0.3,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2016-4581"
      },
      {
        "trust": 0.3,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2015-4004"
      },
      {
        "trust": 0.2,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2016-3134"
      },
      {
        "trust": 0.2,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2016-4470"
      },
      {
        "trust": 0.2,
        "url": "http://www.ubuntu.com/usn/usn-3127-1"
      },
      {
        "trust": 0.2,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2016-7042"
      },
      {
        "trust": 0.2,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2014-9904"
      },
      {
        "trust": 0.2,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2015-3288"
      },
      {
        "trust": 0.1,
        "url": "https://cwe.mitre.org/data/definitions/20.html"
      },
      {
        "trust": 0.1,
        "url": "https://www.rapid7.com/db/vulnerabilities/amazon_linux-cve-2016-3961"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2016-3961"
      },
      {
        "trust": 0.1,
        "url": "https://usn.ubuntu.com/3127-1/"
      },
      {
        "trust": 0.1,
        "url": "https://launchpad.net/ubuntu/+source/linux-raspi2/4.2.0-1031.41"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2016-5243"
      },
      {
        "trust": 0.1,
        "url": "https://launchpad.net/ubuntu/+source/linux-ti-omap4/3.2.0-1485.112"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2016-1237"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2016-2186"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2016-2143"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2016-2184"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2016-3157"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2016-4569"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2016-3138"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2016-2185"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2016-3137"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2016-3140"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2016-3070"
      },
      {
        "trust": 0.1,
        "url": "https://www.debian.org/security/faq"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2016-4482"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2016-3136"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2016-0821"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2016-3156"
      },
      {
        "trust": 0.1,
        "url": "https://www.debian.org/security/"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2015-7515"
      },
      {
        "trust": 0.1,
        "url": "https://launchpad.net/ubuntu/+source/linux-lts-wily/4.2.0-38.45~14.04.1"
      },
      {
        "trust": 0.1,
        "url": "https://launchpad.net/ubuntu/+source/linux-lts-trusty/3.13.0-101.148~precise1"
      },
      {
        "trust": 0.1,
        "url": "http://www.ubuntu.com/usn/usn-3127-2"
      },
      {
        "trust": 0.1,
        "url": "https://launchpad.net/ubuntu/+source/linux/3.13.0-101.148"
      },
      {
        "trust": 0.1,
        "url": "https://launchpad.net/ubuntu/+source/linux/4.2.0-38.45"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2016-02390"
      },
      {
        "db": "VULMON",
        "id": "CVE-2016-3961"
      },
      {
        "db": "BID",
        "id": "86068"
      },
      {
        "db": "PACKETSTORM",
        "id": "137419"
      },
      {
        "db": "PACKETSTORM",
        "id": "138270"
      },
      {
        "db": "PACKETSTORM",
        "id": "137696"
      },
      {
        "db": "PACKETSTORM",
        "id": "137417"
      },
      {
        "db": "PACKETSTORM",
        "id": "139673"
      },
      {
        "db": "PACKETSTORM",
        "id": "139678"
      },
      {
        "db": "PACKETSTORM",
        "id": "137418"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201604-330"
      },
      {
        "db": "NVD",
        "id": "CVE-2016-3961"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "CNVD",
        "id": "CNVD-2016-02390"
      },
      {
        "db": "VULMON",
        "id": "CVE-2016-3961"
      },
      {
        "db": "BID",
        "id": "86068"
      },
      {
        "db": "PACKETSTORM",
        "id": "137419"
      },
      {
        "db": "PACKETSTORM",
        "id": "138270"
      },
      {
        "db": "PACKETSTORM",
        "id": "137696"
      },
      {
        "db": "PACKETSTORM",
        "id": "137417"
      },
      {
        "db": "PACKETSTORM",
        "id": "139673"
      },
      {
        "db": "PACKETSTORM",
        "id": "139678"
      },
      {
        "db": "PACKETSTORM",
        "id": "137418"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201604-330"
      },
      {
        "db": "NVD",
        "id": "CVE-2016-3961"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2016-04-20T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2016-02390"
      },
      {
        "date": "2016-04-15T00:00:00",
        "db": "VULMON",
        "id": "CVE-2016-3961"
      },
      {
        "date": "2016-04-14T00:00:00",
        "db": "BID",
        "id": "86068"
      },
      {
        "date": "2016-06-10T06:06:00",
        "db": "PACKETSTORM",
        "id": "137419"
      },
      {
        "date": "2016-08-10T15:31:42",
        "db": "PACKETSTORM",
        "id": "138270"
      },
      {
        "date": "2016-06-28T15:46:11",
        "db": "PACKETSTORM",
        "id": "137696"
      },
      {
        "date": "2016-06-10T06:04:00",
        "db": "PACKETSTORM",
        "id": "137417"
      },
      {
        "date": "2016-11-11T14:29:32",
        "db": "PACKETSTORM",
        "id": "139673"
      },
      {
        "date": "2016-11-11T14:30:23",
        "db": "PACKETSTORM",
        "id": "139678"
      },
      {
        "date": "2016-06-10T06:05:00",
        "db": "PACKETSTORM",
        "id": "137418"
      },
      {
        "date": "2016-04-15T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201604-330"
      },
      {
        "date": "2016-04-15T14:59:14.050000",
        "db": "NVD",
        "id": "CVE-2016-3961"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2016-04-20T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2016-02390"
      },
      {
        "date": "2016-11-28T00:00:00",
        "db": "VULMON",
        "id": "CVE-2016-3961"
      },
      {
        "date": "2016-07-05T22:42:00",
        "db": "BID",
        "id": "86068"
      },
      {
        "date": "2016-04-18T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201604-330"
      },
      {
        "date": "2016-11-28T20:14:24.493000",
        "db": "NVD",
        "id": "CVE-2016-3961"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "local",
    "sources": [
      {
        "db": "PACKETSTORM",
        "id": "138270"
      },
      {
        "db": "PACKETSTORM",
        "id": "139673"
      },
      {
        "db": "PACKETSTORM",
        "id": "139678"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201604-330"
      }
    ],
    "trust": 0.9
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Xen PV Virtual Machine Denial of Service Vulnerability",
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2016-02390"
      }
    ],
    "trust": 0.6
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "input validation",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201604-330"
      }
    ],
    "trust": 0.6
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.