CVE-2016-6187

Опубликовано: 06 авг. 2016

Источник: ubuntu

Приоритет: medium

EPSS Низкий

CVSS2: 7.2

CVSS3: 7.8

Описание

The apparmor_setprocattr function in security/apparmor/lsm.c in the Linux kernel before 4.6.5 does not validate the buffer size, which allows local users to gain privileges by triggering an AppArmor setprocattr hook.

Релиз	Статус	Примечание
devel	not-affected	4.8.0-22.24
esm-infra-legacy/trusty	not-affected
esm-infra-legacy/xenial	not-affected
esm-infra/xenial	not-affected
precise	not-affected
trusty	not-affected
trusty/esm	not-affected
upstream	released	4.7~rc7
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	not-affected

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-infra-legacy/trusty	DNE
precise	not-affected
trusty	DNE
trusty/esm	DNE
upstream	released	4.7~rc7
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE
wily	DNE
xenial	DNE

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-infra-legacy/trusty	not-affected
esm-infra-legacy/xenial	not-affected
esm-infra/xenial	not-affected
precise	DNE
trusty	not-affected
trusty/esm	not-affected
upstream	released	4.7~rc7
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE

Показывать по

Релиз	Статус	Примечание
devel	not-affected
esm-apps-legacy/xenial	DNE
esm-apps/xenial	DNE
esm-infra-legacy/trusty	DNE	trusty/esm was DNE [trusty was ignored]
precise	DNE
trusty	ignored
trusty/esm	DNE	trusty was ignored
upstream	released	4.7~rc7
vivid/stable-phone-overlay	not-affected
vivid/ubuntu-core	DNE

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-infra-legacy/trusty	DNE
precise	DNE
trusty	DNE
trusty/esm	DNE
upstream	released	4.7~rc7
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE
xenial	not-affected
yakkety	DNE

Показывать по

Релиз	Статус	Примечание
devel	not-affected
esm-apps-legacy/xenial	DNE
esm-apps/xenial	DNE
esm-infra-legacy/trusty	DNE	trusty/esm was DNE [trusty was ignored]
precise	DNE
trusty	ignored
trusty/esm	DNE	trusty was ignored
upstream	released	4.7~rc7
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-infra-legacy/trusty	DNE	trusty/esm was DNE [trusty was ignored]
precise	DNE
trusty	ignored
trusty/esm	DNE	trusty was ignored
upstream	released	4.7~rc7
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE
wily	DNE
xenial	DNE

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-infra-legacy/trusty	DNE
esm-infra-legacy/xenial	not-affected	4.8.0-36.36~16.04.1
esm-infra/xenial	not-affected	4.8.0-36.36~16.04.1
precise	DNE
trusty	DNE
trusty/esm	DNE
upstream	released	4.7~rc7
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-infra-legacy/trusty	DNE
esm-infra-legacy/xenial	not-affected	4.8.0-36.36~16.04.1
esm-infra/xenial	not-affected	4.8.0-36.36~16.04.1
precise	DNE
trusty	DNE
trusty/esm	DNE
upstream	released	4.7~rc7
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-infra-legacy/trusty	DNE
precise	ignored	end of life
trusty	DNE
trusty/esm	DNE
upstream	released	4.7~rc7
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE
wily	DNE
xenial	DNE

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-infra-legacy/trusty	DNE
precise	ignored	end of life
trusty	DNE
trusty/esm	DNE
upstream	released	4.7~rc7
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE
wily	DNE
xenial	DNE

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-infra-legacy/trusty	DNE
precise	ignored	end of life
trusty	DNE
trusty/esm	DNE
upstream	released	4.7~rc7
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE
wily	DNE
xenial	DNE

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-infra-legacy/trusty	DNE
precise	ignored	end of life
trusty	DNE
trusty/esm	DNE
upstream	released	4.7~rc7
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE
wily	DNE
xenial	DNE

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-infra-legacy/trusty	DNE
precise	ignored	end of life
trusty	DNE
trusty/esm	DNE
upstream	released	4.7~rc7
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE
wily	DNE
xenial	DNE

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-infra-legacy/trusty	DNE
precise	ignored	end of life
trusty	DNE
trusty/esm	DNE
upstream	released	4.7~rc7
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE
wily	DNE
xenial	DNE

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-infra-legacy/trusty	DNE
precise	not-affected
trusty	DNE
trusty/esm	DNE
upstream	released	4.7~rc7
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE
wily	DNE
xenial	DNE

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-infra-legacy/trusty	DNE	trusty/esm was DNE [trusty was not-affected]
precise	DNE
trusty	not-affected
trusty/esm	DNE	trusty was not-affected
upstream	released	4.7~rc7
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE
wily	DNE
xenial	DNE

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-infra-legacy/trusty	DNE	trusty/esm was DNE [trusty was not-affected]
precise	DNE
trusty	not-affected
trusty/esm	DNE	trusty was not-affected
upstream	released	4.7~rc7
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE
wily	DNE
xenial	DNE

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-infra-legacy/trusty	DNE	trusty/esm was DNE [trusty was not-affected]
precise	DNE
trusty	not-affected
trusty/esm	DNE	trusty was not-affected
upstream	released	4.7~rc7
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE
wily	DNE
xenial	DNE

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-infra-legacy/trusty	not-affected
precise	DNE
trusty	not-affected
trusty/esm	not-affected
upstream	released	4.7~rc7
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE
wily	DNE
xenial	DNE

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-infra-legacy/trusty	DNE	trusty/esm was DNE [trusty was ignored]
precise	DNE
trusty	ignored
trusty/esm	DNE	trusty was ignored
upstream	released	4.7~rc7
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE
wily	DNE
xenial	DNE

Показывать по

Релиз	Статус	Примечание
devel	not-affected
esm-apps-legacy/xenial	DNE
esm-apps/xenial	DNE
esm-infra-legacy/trusty	DNE	trusty/esm was DNE [trusty was ignored]
precise	DNE
trusty	ignored
trusty/esm	DNE	trusty was ignored
upstream	released	4.7~rc7
vivid/stable-phone-overlay	not-affected
vivid/ubuntu-core	DNE

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-infra-legacy/trusty	DNE	trusty/esm was DNE [trusty was ignored]
precise	DNE
trusty	ignored
trusty/esm	DNE	trusty was ignored
upstream	released	4.7~rc7
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE
wily	not-affected
xenial	DNE

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-infra-legacy/trusty	DNE
precise	ignored	end of life
trusty	DNE
trusty/esm	DNE
upstream	released	4.7~rc7
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE
wily	DNE
xenial	DNE

Показывать по

Релиз	Статус	Примечание
devel	not-affected	4.8.0-1013.15
esm-infra-legacy/trusty	DNE
precise	DNE
trusty	DNE
trusty/esm	DNE
upstream	released	4.7~rc7
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	not-affected
wily	not-affected
xenial	not-affected

Показывать по

Релиз	Статус	Примечание
devel	not-affected
esm-infra-legacy/trusty	DNE
precise	DNE
trusty	DNE
trusty/esm	DNE
upstream	released	4.7~rc7
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE
wily	DNE
xenial	not-affected

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-infra-legacy/trusty	DNE
precise	not-affected
trusty	DNE
trusty/esm	DNE
upstream	released	4.7~rc7
vivid/stable-phone-overlay	DNE
vivid/ubuntu-core	DNE
wily	DNE
xenial	DNE

Показывать по

Ссылки на источники

EPSS

Процентиль: 84%

0.02397

Низкий

7.2 High

CVSS2

7.8 High

CVSS3

Связанные уязвимости

CVE-2016-6187

CVSS3: 7

redhat

больше 10 лет назад

CVE-2016-6187

CVSS3: 7.8

nvd

больше 10 лет назад

CVE-2016-6187

CVSS3: 7.8

debian

больше 10 лет назад

The apparmor_setprocattr function in security/apparmor/lsm.c in the Li ...

GHSA-f2rr-m524-j23q

CVSS3: 7.8

github

больше 4 лет назад

ALT-PU-2016-1795

CVSS3: 7.8

altlinux

больше 10 лет назад

ALT-PU-2016-1795: package `kernel-image-un-def` update to version 4.6.5-alt1

EPSS

Процентиль: 84%

0.02397

Низкий

7.2 High

CVSS2

7.8 High

CVSS3

CVE-2016-6187

Описание

Пакет linux

Пакет linux-armadaxp

Пакет linux-aws

Пакет linux-flo

Пакет linux-gke

Пакет linux-goldfish

Пакет linux-grouper

Пакет linux-hwe

Пакет linux-hwe-edge

Пакет linux-linaro-omap

Пакет linux-linaro-shared

Пакет linux-linaro-vexpress

Пакет linux-lts-quantal

Пакет linux-lts-raring

Пакет linux-lts-saucy

Пакет linux-lts-trusty

Пакет linux-lts-utopic

Пакет linux-lts-vivid

Пакет linux-lts-wily

Пакет linux-lts-xenial

Пакет linux-maguro

Пакет linux-mako

Пакет linux-manta

Пакет linux-qcm-msm

Пакет linux-raspi2

Пакет linux-snapdragon

Пакет linux-ti-omap4

Ссылки на источники

Связанные уязвимости