Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2016-0723

Опубликовано: 08 фев. 2016
Источник: nvd
CVSS3: 6.8
CVSS2: 5.6
EPSS Низкий

Описание

Race condition in the tty_ioctl function in drivers/tty/tty_io.c in the Linux kernel through 4.4.1 allows local users to obtain sensitive information from kernel memory or cause a denial of service (use-after-free and system crash) by making a TIOCGETD ioctl call during processing of a TIOCSETD ioctl call.

Комментарий

CWE-416: Use After Free

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Версия до 4.4.1 (включая)

EPSS

Процентиль: 4%
0.00021
Низкий

6.8 Medium

CVSS3

5.6 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 6.8
ubuntu
больше 9 лет назад

Race condition in the tty_ioctl function in drivers/tty/tty_io.c in the Linux kernel through 4.4.1 allows local users to obtain sensitive information from kernel memory or cause a denial of service (use-after-free and system crash) by making a TIOCGETD ioctl call during processing of a TIOCSETD ioctl call.

redhat
больше 9 лет назад

Race condition in the tty_ioctl function in drivers/tty/tty_io.c in the Linux kernel through 4.4.1 allows local users to obtain sensitive information from kernel memory or cause a denial of service (use-after-free and system crash) by making a TIOCGETD ioctl call during processing of a TIOCSETD ioctl call.

CVSS3: 6.8
debian
больше 9 лет назад

Race condition in the tty_ioctl function in drivers/tty/tty_io.c in th ...

CVSS3: 6.8
github
около 3 лет назад

Race condition in the tty_ioctl function in drivers/tty/tty_io.c in the Linux kernel through 4.4.1 allows local users to obtain sensitive information from kernel memory or cause a denial of service (use-after-free and system crash) by making a TIOCGETD ioctl call during processing of a TIOCSETD ioctl call.

suse-cvrf
больше 9 лет назад

Security update for the Linux Kernel

EPSS

Процентиль: 4%
0.00021
Низкий

6.8 Medium

CVSS3

5.6 Medium

CVSS2

Дефекты

CWE-200