CVE-2016-2053

Опубликовано: 02 мая 2016

Источник: ubuntu

Приоритет: medium

EPSS Низкий

CVSS2: 4.7

CVSS3: 4.7

Описание

The asn1_ber_decoder function in lib/asn1_decoder.c in the Linux kernel before 4.3 allows attackers to cause a denial of service (panic) via an ASN.1 BER file that lacks a public key, leading to mishandling by the public_key_verify_signature function in crypto/asymmetric_keys/public_key.c.

Релиз	Статус	Примечание
devel	not-affected	4.8.0-22.24
esm-infra-legacy/trusty	not-affected	3.13.0-83.127
esm-infra/xenial	not-affected	4.3.0-1.10
precise	not-affected
trusty	released	3.13.0-83.127
trusty/esm	not-affected	3.13.0-83.127
upstream	released	4.3~rc1
vivid	ignored	end of life
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	released	3.19.0-56.62

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-infra-legacy/trusty	DNE
precise	DNE
trusty	DNE
trusty/esm	DNE
upstream	released	4.3~rc1
vivid	DNE
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE
wily	DNE

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-infra-legacy/trusty	DNE
precise	not-affected
trusty	DNE
trusty/esm	DNE
upstream	released	4.3~rc1
vivid	DNE
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE
wily	DNE

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-infra-legacy/trusty	not-affected	4.4.0-1002.2
esm-infra/xenial	not-affected	4.4.0-1001.10
precise	DNE
trusty	not-affected	4.4.0-1002.2
trusty/esm	not-affected	4.4.0-1002.2
upstream	released	4.3~rc1
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE
xenial	not-affected	4.4.0-1001.10

Показывать по

Релиз	Статус	Примечание
devel	not-affected
esm-apps/xenial	DNE
esm-infra-legacy/trusty	DNE	trusty/esm was DNE [trusty was ignored]
precise	DNE
trusty	ignored
trusty/esm	DNE	trusty was ignored
upstream	released	4.3~rc1
vivid	not-affected
vivid/stable-phone-overlay	not-affected
vivid/ubuntu-core	DNE

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-infra-legacy/trusty	DNE
precise	DNE
trusty	DNE
trusty/esm	DNE
upstream	released	4.3~rc1
vivid	DNE
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE
wily	DNE

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-infra-legacy/trusty	DNE
precise	DNE
trusty	DNE
trusty/esm	DNE
upstream	released	4.3~rc1
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE
xenial	not-affected	4.4.0-1003.3
yakkety	DNE

Показывать по

Релиз	Статус	Примечание
devel	not-affected
esm-apps/xenial	DNE
esm-infra-legacy/trusty	DNE	trusty/esm was DNE [trusty was ignored]
precise	DNE
trusty	ignored
trusty/esm	DNE	trusty was ignored
upstream	released	4.3~rc1
vivid	not-affected
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-infra-legacy/trusty	DNE	trusty/esm was DNE [trusty was ignored]
precise	DNE
trusty	ignored
trusty/esm	DNE	trusty was ignored
upstream	released	4.3~rc1
vivid	DNE
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE
wily	DNE

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-infra-legacy/trusty	DNE
esm-infra/xenial	not-affected	4.8.0-36.36~16.04.1
precise	DNE
trusty	DNE
trusty/esm	DNE
upstream	released	4.3~rc1
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE
xenial	not-affected	4.8.0-36.36~16.04.1

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-infra-legacy/trusty	DNE
esm-infra/xenial	not-affected	4.8.0-36.36~16.04.1
precise	DNE
trusty	DNE
trusty/esm	DNE
upstream	released	4.3~rc1
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE
xenial	not-affected	4.8.0-36.36~16.04.1

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-infra-legacy/trusty	DNE
precise	ignored	end of life
trusty	DNE
trusty/esm	DNE
upstream	released	4.3~rc1
vivid	DNE
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE
wily	DNE

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-infra-legacy/trusty	DNE
precise	ignored	end of life
trusty	DNE
trusty/esm	DNE
upstream	released	4.3~rc1
vivid	DNE
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE
wily	DNE

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-infra-legacy/trusty	DNE
precise	ignored	end of life
trusty	DNE
trusty/esm	DNE
upstream	released	4.3~rc1
vivid	DNE
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE
wily	DNE

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-infra-legacy/trusty	DNE
precise	ignored	end of life
trusty	DNE
trusty/esm	DNE
upstream	released	4.3~rc1
vivid	DNE
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE
wily	DNE

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-infra-legacy/trusty	DNE
precise	ignored	end of life
trusty	DNE
trusty/esm	DNE
upstream	released	4.3~rc1
vivid	DNE
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE
wily	DNE

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-infra-legacy/trusty	DNE
precise	ignored	end of life
trusty	DNE
trusty/esm	DNE
upstream	released	4.3~rc1
vivid	DNE
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE
wily	DNE

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-infra-legacy/trusty	DNE
precise	released	3.13.0-83.127~precise1
trusty	DNE
trusty/esm	DNE
upstream	released	4.3~rc1
vivid	DNE
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE
wily	DNE

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-infra-legacy/trusty	DNE	trusty/esm was DNE [trusty was released [3.16.0-69.89~14.04.1]]
precise	DNE
trusty	released	3.16.0-69.89~14.04.1
trusty/esm	DNE	trusty was released [3.16.0-69.89~14.04.1]
upstream	released	4.3~rc1
vivid	DNE
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE
wily	DNE

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-infra-legacy/trusty	DNE	trusty/esm was DNE [trusty was released [3.19.0-56.62~14.04.1]]
precise	DNE
trusty	released	3.19.0-56.62~14.04.1
trusty/esm	DNE	trusty was released [3.19.0-56.62~14.04.1]
upstream	released	4.3~rc1
vivid	DNE
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE
wily	DNE

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-infra-legacy/trusty	DNE	trusty/esm was DNE [trusty was released [4.2.0-35.40~14.04.1]]
precise	DNE
trusty	released	4.2.0-35.40~14.04.1
trusty/esm	DNE	trusty was released [4.2.0-35.40~14.04.1]
upstream	released	4.3~rc1
vivid	DNE
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE
wily	DNE

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-infra-legacy/trusty	not-affected	4.4.0-13.29~14.04.1
precise	DNE
trusty	not-affected	4.4.0-13.29~14.04.1
trusty/esm	not-affected	4.4.0-13.29~14.04.1
upstream	released	4.3~rc1
vivid	DNE
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE
wily	DNE

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-infra-legacy/trusty	DNE	trusty/esm was DNE [trusty was ignored]
precise	DNE
trusty	ignored
trusty/esm	DNE	trusty was ignored
upstream	released	4.3~rc1
vivid	DNE
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE
wily	DNE

Показывать по

Релиз	Статус	Примечание
devel	not-affected
esm-apps/xenial	DNE
esm-infra-legacy/trusty	DNE	trusty/esm was DNE [trusty was ignored]
precise	DNE
trusty	ignored
trusty/esm	DNE	trusty was ignored
upstream	released	4.3~rc1
vivid	not-affected
vivid/stable-phone-overlay	not-affected
vivid/ubuntu-core	DNE

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-infra-legacy/trusty	DNE	trusty/esm was DNE [trusty was ignored]
precise	DNE
trusty	ignored
trusty/esm	DNE	trusty was ignored
upstream	released	4.3~rc1
vivid	not-affected
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE
wily	not-affected

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-infra-legacy/trusty	DNE
precise	ignored	end of life
trusty	DNE
trusty/esm	DNE
upstream	released	4.3~rc1
vivid	DNE
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE
wily	DNE

Показывать по

Релиз	Статус	Примечание
devel	not-affected	4.8.0-1013.15
esm-infra-legacy/trusty	DNE
precise	DNE
trusty	DNE
trusty/esm	DNE
upstream	released	4.3~rc1
vivid	DNE
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	ignored	end of life, was pending
wily	released	4.2.0-1028.36

Показывать по

Релиз	Статус	Примечание
devel	not-affected	4.4.0-1029.32
esm-infra-legacy/trusty	DNE
precise	DNE
trusty	DNE
trusty/esm	DNE
upstream	released	4.3~rc1
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE
wily	DNE
xenial	not-affected	4.4.0-1012.12

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-infra-legacy/trusty	DNE
precise	not-affected
trusty	DNE
trusty/esm	DNE
upstream	released	4.3~rc1
vivid	DNE
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE
wily	DNE

Показывать по

Ссылки на источники

EPSS

Процентиль: 27%

0.00093

Низкий

4.7 Medium

CVSS2

4.7 Medium

CVSS3

Связанные уязвимости

CVE-2016-2053

redhat

больше 9 лет назад

CVE-2016-2053

CVSS3: 4.7

nvd

около 9 лет назад

CVE-2016-2053

CVSS3: 4.7

debian

около 9 лет назад

The asn1_ber_decoder function in lib/asn1_decoder.c in the Linux kerne ...

GHSA-7689-m3w7-j29p

CVSS3: 4.7

github

около 3 лет назад

SUSE-SU-2016:2011-1

suse-cvrf

почти 9 лет назад

Security update for Linux Kernel Live Patch 6 for SLE 12 SP1

EPSS

Процентиль: 27%

0.00093

Низкий

4.7 Medium

CVSS2

4.7 Medium

CVSS3

CVE-2016-2053

Описание

Пакет linux

Пакет linux-2.6

Пакет linux-armadaxp

Пакет linux-aws

Пакет linux-flo

Пакет linux-fsl-imx51

Пакет linux-gke

Пакет linux-goldfish

Пакет linux-grouper

Пакет linux-hwe

Пакет linux-hwe-edge

Пакет linux-linaro-omap

Пакет linux-linaro-shared

Пакет linux-linaro-vexpress

Пакет linux-lts-quantal

Пакет linux-lts-raring

Пакет linux-lts-saucy

Пакет linux-lts-trusty

Пакет linux-lts-utopic

Пакет linux-lts-vivid

Пакет linux-lts-wily

Пакет linux-lts-xenial

Пакет linux-maguro

Пакет linux-mako

Пакет linux-manta

Пакет linux-qcm-msm

Пакет linux-raspi2

Пакет linux-snapdragon

Пакет linux-ti-omap4

Ссылки на источники

Связанные уязвимости