CVE-2016-10225

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2016-10225
The sunxi-debug driver in Allwinner 3.4 legacy kernel for H3, A83T and H8 devices allows local users to gain root privileges by sending "rootmydevice" to /proc/sunxi_debug/sunxi_debug.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

7.2 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 3.9 / Impact : 10.0

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References
Link Resource
http://www.openwall.com/lists/oss-security/2016/10/05/16 Mailing List Patch Third Party Advisory
http://www.openwall.com/lists/oss-security/2017/02/15/9 Mailing List Third Party Advisory
http://www.securityfocus.com/bid/93442 Third Party Advisory VDB Entry
https://forum.armbian.com/index.php?/topic/1108-security-alert-for-allwinner-sun8i-h3a83th8/ Mailing List Third Party Advisory
https://irclog.whitequark.org/linux-sunxi/2016-04-29#16314390 Issue Tracking Third Party Advisory
https://www.rapid7.com/db/modules/exploit/multi/local/allwinner_backdoor Exploit Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/10/05/16 Mailing List Patch Third Party Advisory
http://www.openwall.com/lists/oss-security/2017/02/15/9 Mailing List Third Party Advisory
http://www.securityfocus.com/bid/93442 Third Party Advisory VDB Entry
https://forum.armbian.com/index.php?/topic/1108-security-alert-for-allwinner-sun8i-h3a83th8/ Mailing List Third Party Advisory
https://irclog.whitequark.org/linux-sunxi/2016-04-29#16314390 Issue Tracking Third Party Advisory
https://www.rapid7.com/db/modules/exploit/multi/local/allwinner_backdoor Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:allwinner:linux-3.4-sunxi:-:*:*:*:*:*:*:*
OR cpe:2.3:h:allwinner:a83t:-:*:*:*:*:*:*:*
cpe:2.3:h:allwinner:h3:-:*:*:*:*:*:*:*
cpe:2.3:h:allwinner:h8:-:*:*:*:*:*:*:*
History

21 Nov 2024, 02:43

Type Values Removed Values Added
References () http://www.openwall.com/lists/oss-security/2016/10/05/16 - Mailing List, Patch, Third Party Advisory () http://www.openwall.com/lists/oss-security/2016/10/05/16 - Mailing List, Patch, Third Party Advisory
References () http://www.openwall.com/lists/oss-security/2017/02/15/9 - Mailing List, Third Party Advisory () http://www.openwall.com/lists/oss-security/2017/02/15/9 - Mailing List, Third Party Advisory
References () http://www.securityfocus.com/bid/93442 - Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/93442 - Third Party Advisory, VDB Entry
References () https://forum.armbian.com/index.php?/topic/1108-security-alert-for-allwinner-sun8i-h3a83th8/ - Mailing List, Third Party Advisory () https://forum.armbian.com/index.php?/topic/1108-security-alert-for-allwinner-sun8i-h3a83th8/ - Mailing List, Third Party Advisory
References () https://irclog.whitequark.org/linux-sunxi/2016-04-29#16314390 - Issue Tracking, Third Party Advisory () https://irclog.whitequark.org/linux-sunxi/2016-04-29#16314390 - Issue Tracking, Third Party Advisory
References () https://www.rapid7.com/db/modules/exploit/multi/local/allwinner_backdoor - Exploit, Third Party Advisory () https://www.rapid7.com/db/modules/exploit/multi/local/allwinner_backdoor - Exploit, Third Party Advisory
Information

Published : 2017-03-27 17:59

Updated : 2024-11-21 02:43

NVD link : CVE-2016-10225

Mitre link : CVE-2016-10225

CVE.ORG link : CVE-2016-10225

JSON object : View

Products Affected

allwinner

  • a83t
  • linux-3.4-sunxi
  • h8
  • h3
CWE
CWE-264

Permissions, Privileges, and Access Controls