CVE-2016-3857

Опубликовано: 05 авг. 2016

Источник: ubuntu

Приоритет: medium

EPSS Низкий

CVSS2: 9.3

CVSS3: 7.8

Описание

The kernel in Android before 2016-08-05 on Nexus 7 (2013) devices allows attackers to gain privileges via a crafted application, aka internal bug 28522518.

Релиз	Статус	Примечание
devel	not-affected	CONFIG_OABI_COMPAT not enabled
esm-infra-legacy/trusty	not-affected	CONFIG_OABI_COMPAT not enabled
esm-infra/xenial	not-affected	CONFIG_OABI_COMPAT not enabled
precise	released	3.2.0-110.151
precise/esm	released	3.2.0-110.151
trusty	not-affected	CONFIG_OABI_COMPAT not enabled
trusty/esm	not-affected	CONFIG_OABI_COMPAT not enabled
upstream	released	4.8~rc2
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	not-affected	CONFIG_OABI_COMPAT not enabled

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-infra-legacy/trusty	DNE
precise	released	3.2.0-1673.99
precise/esm	DNE	precise was released [3.2.0-1673.99]
trusty	DNE
trusty/esm	DNE
upstream	released	4.8~rc2
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE
xenial	DNE

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-infra-legacy/trusty	not-affected	4.4.0-1002.2
esm-infra/xenial	not-affected	4.4.0-1001.10
precise	DNE
precise/esm	DNE
trusty	not-affected	4.4.0-1002.2
trusty/esm	not-affected	4.4.0-1002.2
upstream	released	4.8~rc2
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-apps/xenial	DNE
esm-infra-legacy/trusty	DNE	trusty/esm was DNE [trusty was ignored]
precise	DNE
precise/esm	DNE
trusty	ignored
trusty/esm	DNE	trusty was ignored
upstream	released	4.8~rc2
vivid/stable-phone-overlay	ignored	end of life
vivid/ubuntu-core	DNE

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-infra-legacy/trusty	DNE
precise	DNE
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	released	4.8~rc2
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE
xenial	not-affected	4.4.0-1003.3

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-apps/xenial	DNE
esm-infra-legacy/trusty	DNE	trusty/esm was DNE [trusty was ignored]
precise	DNE
precise/esm	DNE
trusty	ignored
trusty/esm	DNE	trusty was ignored
upstream	released	4.8~rc2
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-infra-legacy/trusty	DNE	trusty/esm was DNE [trusty was ignored]
precise	DNE
precise/esm	DNE
trusty	ignored
trusty/esm	DNE	trusty was ignored
upstream	released	4.8~rc2
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE
xenial	DNE

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-infra-legacy/trusty	DNE
esm-infra/xenial	not-affected	4.8.0-36.36~16.04.1
precise	DNE
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	released	4.8~rc2
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-infra-legacy/trusty	DNE
esm-infra/xenial	not-affected	4.8.0-36.36~16.04.1
precise	DNE
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	released	4.8~rc2
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-infra-legacy/trusty	DNE
precise	ignored	end of life
precise/esm	DNE	precise was ignored [abandoned]
trusty	DNE
trusty/esm	DNE
upstream	released	4.8~rc2
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE
xenial	DNE

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-infra-legacy/trusty	DNE
precise	ignored	end of life
precise/esm	DNE	precise was ignored [abandoned]
trusty	DNE
trusty/esm	DNE
upstream	released	4.8~rc2
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE
xenial	DNE

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-infra-legacy/trusty	DNE
precise	ignored	end of life
precise/esm	DNE	precise was ignored [abandoned]
trusty	DNE
trusty/esm	DNE
upstream	released	4.8~rc2
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE
xenial	DNE

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-infra-legacy/trusty	DNE
precise	ignored	end of life
precise/esm	ignored	end of life, was ignored
trusty	DNE
trusty/esm	DNE
upstream	released	4.8~rc2
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE
xenial	DNE

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-infra-legacy/trusty	DNE
precise	ignored	end of life
precise/esm	ignored	end of life, was ignored
trusty	DNE
trusty/esm	DNE
upstream	released	4.8~rc2
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE
xenial	DNE

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-infra-legacy/trusty	DNE
precise	ignored	end of life
precise/esm	ignored	end of life, was ignored
trusty	DNE
trusty/esm	DNE
upstream	released	4.8~rc2
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE
xenial	DNE

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-infra-legacy/trusty	DNE
precise	not-affected	CONFIG_OABI_COMPAT not enabled
precise/esm	not-affected	CONFIG_OABI_COMPAT not enabled
trusty	DNE
trusty/esm	DNE
upstream	released	4.8~rc2
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE
xenial	DNE

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-infra-legacy/trusty	DNE	trusty/esm was DNE [trusty was not-affected [CONFIG_OABI_COMPAT not enabled]]
precise	DNE
precise/esm	DNE
trusty	not-affected	CONFIG_OABI_COMPAT not enabled
trusty/esm	DNE	trusty was not-affected [CONFIG_OABI_COMPAT not enabled]
upstream	released	4.8~rc2
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE
xenial	DNE

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-infra-legacy/trusty	DNE	trusty/esm was DNE [trusty was not-affected [CONFIG_OABI_COMPAT not enabled]]
precise	DNE
precise/esm	DNE
trusty	not-affected	CONFIG_OABI_COMPAT not enabled
trusty/esm	DNE	trusty was not-affected [CONFIG_OABI_COMPAT not enabled]
upstream	released	4.8~rc2
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE
xenial	DNE

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-infra-legacy/trusty	DNE	trusty/esm was DNE [trusty was not-affected [CONFIG_OABI_COMPAT not enabled]]
precise	DNE
precise/esm	DNE
trusty	not-affected	CONFIG_OABI_COMPAT not enabled
trusty/esm	DNE	trusty was not-affected [CONFIG_OABI_COMPAT not enabled]
upstream	released	4.8~rc2
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE
xenial	DNE

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-infra-legacy/trusty	not-affected	CONFIG_OABI_COMPAT not enabled
precise	DNE
precise/esm	DNE
trusty	not-affected	CONFIG_OABI_COMPAT not enabled
trusty/esm	not-affected	CONFIG_OABI_COMPAT not enabled
upstream	released	4.8~rc2
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE
xenial	DNE

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-infra-legacy/trusty	DNE	trusty/esm was DNE [trusty was ignored]
precise	DNE
precise/esm	DNE
trusty	ignored
trusty/esm	DNE	trusty was ignored
upstream	released	4.8~rc2
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE
xenial	DNE

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-apps/xenial	DNE
esm-infra-legacy/trusty	DNE	trusty/esm was DNE [trusty was ignored]
precise	DNE
precise/esm	DNE
trusty	ignored
trusty/esm	DNE	trusty was ignored
upstream	released	4.8~rc2
vivid/stable-phone-overlay	ignored	end of life
vivid/ubuntu-core	DNE

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-infra-legacy/trusty	DNE	trusty/esm was DNE [trusty was ignored]
precise	DNE
precise/esm	DNE
trusty	ignored
trusty/esm	DNE	trusty was ignored
upstream	released	4.8~rc2
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE
xenial	DNE

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-infra-legacy/trusty	DNE
precise	ignored	end of life
precise/esm	DNE	precise was ignored [abandoned]
trusty	DNE
trusty/esm	DNE
upstream	released	4.8~rc2
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE
xenial	DNE

Показывать по

Релиз	Статус	Примечание
devel	not-affected	CONFIG_OABI_COMPAT not enabled
esm-infra-legacy/trusty	DNE
precise	DNE
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	released	4.8~rc2
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	not-affected	CONFIG_OABI_COMPAT not enabled
xenial	not-affected	CONFIG_OABI_COMPAT not enabled

Показывать по

Релиз	Статус	Примечание
devel	not-affected	CONFIG_OABI_COMPAT not enabled
esm-infra-legacy/trusty	DNE
precise	DNE
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	released	4.8~rc2
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE
xenial	not-affected	CONFIG_OABI_COMPAT not enabled

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-infra-legacy/trusty	DNE
precise	released	3.2.0-1488.115
precise/esm	DNE	precise was released [3.2.0-1488.115]
trusty	DNE
trusty/esm	DNE
upstream	released	4.8~rc2
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE
xenial	DNE

Показывать по

Ссылки на источники

EPSS

Процентиль: 33%

0.00129

Низкий

9.3 Critical

CVSS2

7.8 High

CVSS3

Связанные уязвимости

CVE-2016-3857

CVSS3: 7.8

redhat

больше 9 лет назад

The kernel in Android before 2016-08-05 on Nexus 7 (2013) devices allows attackers to gain privileges via a crafted application, aka internal bug 28522518.

CVE-2016-3857

CVSS3: 7.8

nvd

больше 9 лет назад

The kernel in Android before 2016-08-05 on Nexus 7 (2013) devices allows attackers to gain privileges via a crafted application, aka internal bug 28522518.

CVE-2016-3857

CVSS3: 7.8

debian

больше 9 лет назад

The kernel in Android before 2016-08-05 on Nexus 7 (2013) devices allo ...

GHSA-vqp6-fq4v-xhc9

CVSS3: 7.8

github

больше 3 лет назад

The kernel in Android before 2016-08-05 on Nexus 7 (2013) devices allows attackers to gain privileges via a crafted application, aka internal bug 28522518.

BDU:2016-01927

fstec

больше 9 лет назад

Уязвимость операционной системы Android, позволяющая нарушителю повысить свои привилегии

EPSS

Процентиль: 33%

0.00129

Низкий

9.3 Critical

CVSS2

7.8 High

CVSS3

CVE-2016-3857

Описание

Пакет linux

Пакет linux-armadaxp

Пакет linux-aws

Пакет linux-flo

Пакет linux-gke

Пакет linux-goldfish

Пакет linux-grouper

Пакет linux-hwe

Пакет linux-hwe-edge

Пакет linux-linaro-omap

Пакет linux-linaro-shared

Пакет linux-linaro-vexpress

Пакет linux-lts-quantal

Пакет linux-lts-raring

Пакет linux-lts-saucy

Пакет linux-lts-trusty

Пакет linux-lts-utopic

Пакет linux-lts-vivid

Пакет linux-lts-wily

Пакет linux-lts-xenial

Пакет linux-maguro

Пакет linux-mako

Пакет linux-manta

Пакет linux-qcm-msm

Пакет linux-raspi2

Пакет linux-snapdragon

Пакет linux-ti-omap4

Ссылки на источники

Связанные уязвимости