CVE-2016-4913

{"id": "CVE-2016-4913", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.2, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "published": "2016-05-23T10:59:14.723", "references": [{"url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=99d825822eade8d827a1817357cbf3f889a552d6", "tags": ["Vendor Advisory"], "source": "security@debian.org"}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html", "tags": ["Third Party Advisory"], "source": "security@debian.org"}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html", "tags": ["Mailing List", "Third Party Advisory"], "source": "security@debian.org"}, {"url": "http://www.debian.org/security/2016/dsa-3607", "tags": ["Third Party Advisory"], "source": "security@debian.org"}, {"url": "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.5", "tags": ["Vendor Advisory"], "source": "security@debian.org"}, {"url": "http://www.openwall.com/lists/oss-security/2016/05/18/3", "tags": ["Mailing List", "Patch", "Third Party Advisory"], "source": "security@debian.org"}, {"url": "http://www.openwall.com/lists/oss-security/2016/05/18/5", "tags": ["Mailing List", "Patch", "Third Party Advisory"], "source": "security@debian.org"}, {"url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html", "tags": ["Third Party Advisory"], "source": "security@debian.org"}, {"url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html", "tags": ["Third Party Advisory"], "source": "security@debian.org"}, {"url": "http://www.securityfocus.com/bid/90730", "tags": ["Third Party Advisory", "VDB Entry"], "source": "security@debian.org"}, {"url": "http://www.ubuntu.com/usn/USN-3016-1", "tags": ["Third Party Advisory"], "source": "security@debian.org"}, {"url": "http://www.ubuntu.com/usn/USN-3016-2", "tags": ["Third Party Advisory"], "source": "security@debian.org"}, {"url": "http://www.ubuntu.com/usn/USN-3016-3", "tags": ["Third Party Advisory"], "source": "security@debian.org"}, {"url": "http://www.ubuntu.com/usn/USN-3016-4", "tags": ["Third Party Advisory"], "source": "security@debian.org"}, {"url": "http://www.ubuntu.com/usn/USN-3017-1", "tags": ["Third Party Advisory"], "source": "security@debian.org"}, {"url": "http://www.ubuntu.com/usn/USN-3017-2", "tags": ["Third Party Advisory"], "source": "security@debian.org"}, {"url": "http://www.ubuntu.com/usn/USN-3017-3", "tags": ["Third Party Advisory"], "source": "security@debian.org"}, {"url": "http://www.ubuntu.com/usn/USN-3018-1", "tags": ["Third Party Advisory"], "source": "security@debian.org"}, {"url": "http://www.ubuntu.com/usn/USN-3018-2", "tags": ["Third Party Advisory"], "source": "security@debian.org"}, {"url": "http://www.ubuntu.com/usn/USN-3019-1", "tags": ["Third Party Advisory"], "source": "security@debian.org"}, {"url": "http://www.ubuntu.com/usn/USN-3020-1", "tags": ["Third Party Advisory"], "source": "security@debian.org"}, {"url": "http://www.ubuntu.com/usn/USN-3021-1", "tags": ["Third Party Advisory"], "source": "security@debian.org"}, {"url": "http://www.ubuntu.com/usn/USN-3021-2", "tags": ["Third Party Advisory"], "source": "security@debian.org"}, {"url": "https://access.redhat.com/errata/RHSA-2018:3083", "tags": ["Third Party Advisory"], "source": "security@debian.org"}, {"url": "https://access.redhat.com/errata/RHSA-2018:3096", "tags": ["Third Party Advisory"], "source": "security@debian.org"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1337528", "tags": ["Issue Tracking", "Third Party Advisory", "VDB Entry"], "source": "security@debian.org"}, {"url": "https://github.com/torvalds/linux/commit/99d825822eade8d827a1817357cbf3f889a552d6", "tags": ["Vendor Advisory"], "source": "security@debian.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-200"}]}], "descriptions": [{"lang": "en", "value": "The get_rock_ridge_filename function in fs/isofs/rock.c in the Linux kernel before 4.5.5 mishandles NM (aka alternate name) entries containing \\0 characters, which allows local users to obtain sensitive information from kernel memory or possibly have unspecified other impact via a crafted isofs filesystem."}, {"lang": "es", "value": "La funci\u00f3n get_rock_ridge_filename en fs/isofs/rock.c en el kernel de Linux en versiones anteriores a 4.5.5 no maneja correctamente entradas NM (tambi\u00e9n conocidas como alternate name) que contienen caracteres \\0, lo que permite a usuarios locales obtener informaci\u00f3n sensible del kernel de memoria o posiblemente tener otro impacto no especificado a trav\u00e9s de un sistema de archivo isofs manipulado."}], "lastModified": "2023-09-12T14:45:07.473", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*", "vulnerable": true, "matchCriteriaId": "B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"}, {"criteria": "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*", "vulnerable": true, "matchCriteriaId": "B5A6F2F3-4894-4392-8296-3B8DD2679084"}, {"criteria": "cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E88A537F-F4D0-46B9-9E37-965233C2A355"}, {"criteria": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*", "vulnerable": true, "matchCriteriaId": "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A89742F0-7BC2-48BE-BD22-2446513A7204", "versionEndExcluding": "3.2.81"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0F147711-AD8B-484D-8393-5BCFC6C59EC3", "versionEndExcluding": "3.10.102", "versionStartIncluding": "3.3"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7F5C3CC6-7128-4F37-B99A-76F53AF715CF", "versionEndExcluding": "3.12.60", "versionStartIncluding": "3.11"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D6D3F25E-4D66-4712-A7C2-29EF4D7822D8", "versionEndExcluding": "3.14.70", "versionStartIncluding": "3.13"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "76266D0E-6C62-4AF5-A345-3ABBDB8DD9FA", "versionEndExcluding": "3.16.36", "versionStartIncluding": "3.15"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C51D9E11-9A86-4481-B5D3-63D770F9CC47", "versionEndExcluding": "3.18.34", "versionStartIncluding": "3.17"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "85FB2422-CC34-4FFB-8FEE-4A3A8976F17A", "versionEndExcluding": "4.1.25", "versionStartIncluding": "3.19"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7FA57A30-875F-45C7-874A-F90B6F114FC9", "versionEndExcluding": "4.4.11", "versionStartIncluding": "4.2"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4EC30B3A-B105-4482-A6B1-A5D1C79EFBA2", "versionEndExcluding": "4.5.5", "versionStartIncluding": "4.5"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:oracle:linux:6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CC7A498A-A669-4C42-8134-86103C799D13"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:11.0:sp4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A5FDEDA8-6F51-4945-B443-438CC987F235"}, {"criteria": "cpe:2.3:o:novell:suse_linux_enterprise_debuginfo:11.0:sp4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E090E7B3-2346-463D-8A0C-8B482500CB42"}, {"criteria": "cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:extra:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A8877923-3E50-4F71-B501-E6997894D07E"}, {"criteria": "cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ADE9D807-6690-4D67-A6B3-68BBC9B50153"}], "operator": "OR"}]}], "sourceIdentifier": "security@debian.org"}