CVE-2016-5011

Опубликовано: 11 апр. 2017

Источник: nvd

CVSS3: 4.6

CVSS2: 4.9

EPSS Низкий

Описание

The parse_dos_extended function in partitions/dos.c in the libblkid library in util-linux allows physically proximate attackers to cause a denial of service (memory consumption) via a crafted MSDOS partition table with an extended partition boot record at zero offset.

Ссылки

http://rhn.redhat.com/errata/RHSA-2016-2605.html
Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=isg3T1024543
Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=nas8N1021801
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/07/11/2
Mailing List
Patch
Third Party Advisory
http://www.securityfocus.com/bid/91683
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1036272
Third Party Advisory
VDB Entry
https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/commit/?id=7164a1c3
Patch
Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2016-2605.html
Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=isg3T1024543
Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=nas8N1021801
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/07/11/2
Mailing List
Patch
Third Party Advisory
http://www.securityfocus.com/bid/91683
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1036272
Third Party Advisory
VDB Entry
https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/commit/?id=7164a1c3
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:kernel:util-linux:*:*:*:*:*:*:*:*

Версия до 2.28 (включая)

Конфигурация 2

Одно из

cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:7.3:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:a:ibm:powerkvm:2.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:powerkvm:3.1:*:*:*:*:*:*:*

Конфигурация 4

cpe:2.3:a:ibm:power_hardware_management_console:8.8.6.0:*:*:*:*:*:*:*

EPSS

Процентиль: 43%

0.00203

Низкий

4.6 Medium

CVSS3

4.9 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2016-5011

CVSS3: 4.6

ubuntu

больше 8 лет назад

CVE-2016-5011

CVSS3: 4.6

redhat

около 9 лет назад

CVE-2016-5011

CVSS3: 4.6

debian

больше 8 лет назад

The parse_dos_extended function in partitions/dos.c in the libblkid li ...

openSUSE-SU-2016:3102-1

suse-cvrf

больше 8 лет назад

Security update for util-linux

openSUSE-SU-2016:2840-1

suse-cvrf

почти 9 лет назад

Security update for util-linux

EPSS

Процентиль: 43%

0.00203

Низкий

4.6 Medium

CVSS3

4.9 Medium

CVSS2

Дефекты

NVD-CWE-noinfo