CVE-2016-8633

Опубликовано: 28 нояб. 2016

Источник: nvd

CVSS3: 6.8

CVSS2: 6.2

EPSS Низкий

Описание

drivers/firewire/net.c in the Linux kernel before 4.8.7, in certain unusual hardware configurations, allows remote attackers to execute arbitrary code via crafted fragmented packets.

Ссылки

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=667121ace9dbafb368618dbabcf07901c962ddac
Issue Tracking
Patch
Vendor Advisory
http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.7
Release Notes
http://www.openwall.com/lists/oss-security/2016/11/06/1
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/94149
https://access.redhat.com/errata/RHSA-2018:0676
https://access.redhat.com/errata/RHSA-2018:1062
https://access.redhat.com/errata/RHSA-2019:1170
https://access.redhat.com/errata/RHSA-2019:1190
https://bugzilla.redhat.com/show_bug.cgi?id=1391490
Issue Tracking
https://eyalitkin.wordpress.com/2016/11/06/cve-publication-cve-2016-8633/
Third Party Advisory
https://github.com/torvalds/linux/commit/667121ace9dbafb368618dbabcf07901c962ddac
Issue Tracking
Patch
Third Party Advisory
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=667121ace9dbafb368618dbabcf07901c962ddac
Issue Tracking
Patch
Vendor Advisory
http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.7
Release Notes
http://www.openwall.com/lists/oss-security/2016/11/06/1
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/94149
https://access.redhat.com/errata/RHSA-2018:0676
https://access.redhat.com/errata/RHSA-2018:1062
https://access.redhat.com/errata/RHSA-2019:1170
https://access.redhat.com/errata/RHSA-2019:1190
https://bugzilla.redhat.com/show_bug.cgi?id=1391490
Issue Tracking

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия до 4.8.6 (включая)

EPSS

Процентиль: 76%

0.01029

Низкий

6.8 Medium

CVSS3

6.2 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

CVE-2016-8633

CVSS3: 6.8

ubuntu

больше 8 лет назад

drivers/firewire/net.c in the Linux kernel before 4.8.7, in certain unusual hardware configurations, allows remote attackers to execute arbitrary code via crafted fragmented packets.

CVE-2016-8633

CVSS3: 6.8

redhat

больше 8 лет назад

drivers/firewire/net.c in the Linux kernel before 4.8.7, in certain unusual hardware configurations, allows remote attackers to execute arbitrary code via crafted fragmented packets.

CVE-2016-8633

CVSS3: 6.8

debian

больше 8 лет назад

drivers/firewire/net.c in the Linux kernel before 4.8.7, in certain un ...

GHSA-98p8-g74r-rjv3

CVSS3: 6.8

github

около 3 лет назад

drivers/firewire/net.c in the Linux kernel before 4.8.7, in certain unusual hardware configurations, allows remote attackers to execute arbitrary code via crafted fragmented packets.

ELSA-2017-3535

oracle-oval

около 8 лет назад

ELSA-2017-3535: Unbreakable Enterprise kernel security update (IMPORTANT)

EPSS

Процентиль: 76%

0.01029

Низкий

6.8 Medium

CVSS3

6.2 Medium

CVSS2

Дефекты

CWE-119