2017-10-16 12:31:07 -04:00
{
2019-03-18 01:33:49 +00:00
"CVE_data_meta" : {
"ASSIGNER" : "security@ubuntu.com" ,
"ID" : "CVE-2016-1583" ,
"STATE" : "PUBLIC"
} ,
"affects" : {
"vendor" : {
"vendor_data" : [
{
"product" : {
"product_data" : [
{
"product_name" : "n/a" ,
"version" : {
"version_data" : [
{
"version_value" : "n/a"
}
]
}
}
]
} ,
"vendor_name" : "n/a"
}
2017-10-16 12:31:07 -04:00
]
2019-03-18 01:33:49 +00:00
}
} ,
"data_format" : "MITRE" ,
"data_type" : "CVE" ,
"data_version" : "4.0" ,
"description" : {
"description_data" : [
{
"lang" : "eng" ,
"value" : "The ecryptfs_privileged_open function in fs/ecryptfs/kthread.c in the Linux kernel before 4.6.3 allows local users to gain privileges or cause a denial of service (stack memory consumption) via vectors involving crafted mmap calls for /proc pathnames, leading to recursive pagefault handling."
}
]
} ,
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng" ,
"value" : "n/a"
}
]
}
]
} ,
"references" : {
"reference_data" : [
{
"name" : "USN-3006-1" ,
"refsource" : "UBUNTU" ,
"url" : "http://www.ubuntu.com/usn/USN-3006-1"
} ,
{
"name" : "USN-3004-1" ,
"refsource" : "UBUNTU" ,
"url" : "http://www.ubuntu.com/usn/USN-3004-1"
} ,
{
"name" : "SUSE-SU-2016:2010" ,
"refsource" : "SUSE" ,
"url" : "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00022.html"
} ,
{
"name" : "https://github.com/torvalds/linux/commit/f5364c150aa645b3d7daa21b5c0b9feaa1c9cd6d" ,
"refsource" : "CONFIRM" ,
"url" : "https://github.com/torvalds/linux/commit/f5364c150aa645b3d7daa21b5c0b9feaa1c9cd6d"
} ,
{
"name" : "RHSA-2016:2766" ,
"refsource" : "REDHAT" ,
"url" : "http://rhn.redhat.com/errata/RHSA-2016-2766.html"
} ,
{
"name" : "USN-3001-1" ,
"refsource" : "UBUNTU" ,
"url" : "http://www.ubuntu.com/usn/USN-3001-1"
} ,
{
"name" : "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.6.3" ,
"refsource" : "CONFIRM" ,
"url" : "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.6.3"
} ,
{
"name" : "SUSE-SU-2016:1696" ,
"refsource" : "SUSE" ,
"url" : "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00056.html"
} ,
{
"name" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f5364c150aa645b3d7daa21b5c0b9feaa1c9cd6d" ,
"refsource" : "CONFIRM" ,
"url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f5364c150aa645b3d7daa21b5c0b9feaa1c9cd6d"
} ,
{
"name" : "SUSE-SU-2016:1994" ,
"refsource" : "SUSE" ,
"url" : "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00008.html"
} ,
{
"name" : "39992" ,
"refsource" : "EXPLOIT-DB" ,
"url" : "https://www.exploit-db.com/exploits/39992/"
} ,
{
"name" : "SUSE-SU-2016:1961" ,
"refsource" : "SUSE" ,
"url" : "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00003.html"
} ,
{
"name" : "USN-3005-1" ,
"refsource" : "UBUNTU" ,
"url" : "http://www.ubuntu.com/usn/USN-3005-1"
} ,
{
"name" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=836" ,
"refsource" : "MISC" ,
"url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=836"
} ,
{
"name" : "SUSE-SU-2016:1985" ,
"refsource" : "SUSE" ,
"url" : "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html"
} ,
{
"name" : "91157" ,
"refsource" : "BID" ,
"url" : "http://www.securityfocus.com/bid/91157"
} ,
{
"name" : "openSUSE-SU-2016:2184" ,
"refsource" : "SUSE" ,
"url" : "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html"
} ,
{
"name" : "USN-2999-1" ,
"refsource" : "UBUNTU" ,
"url" : "http://www.ubuntu.com/usn/USN-2999-1"
} ,
{
"name" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2f36db71009304b3f0b95afacd8eba1f9f046b87" ,
"refsource" : "CONFIRM" ,
"url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2f36db71009304b3f0b95afacd8eba1f9f046b87"
} ,
{
"name" : "SUSE-SU-2016:2006" ,
"refsource" : "SUSE" ,
"url" : "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00019.html"
} ,
{
"name" : "[oss-security] 20160610 [vs-plain] Linux kernel stack overflow via ecryptfs and /proc/$pid/environ" ,
"refsource" : "MLIST" ,
"url" : "http://www.openwall.com/lists/oss-security/2016/06/10/8"
} ,
{
"name" : "SUSE-SU-2016:2014" ,
"refsource" : "SUSE" ,
"url" : "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00026.html"
} ,
{
"name" : "openSUSE-SU-2016:1641" ,
"refsource" : "SUSE" ,
"url" : "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html"
} ,
{
"name" : "USN-2997-1" ,
"refsource" : "UBUNTU" ,
"url" : "http://www.ubuntu.com/usn/USN-2997-1"
} ,
{
"name" : "USN-3000-1" ,
"refsource" : "UBUNTU" ,
"url" : "http://www.ubuntu.com/usn/USN-3000-1"
} ,
{
"name" : "https://github.com/torvalds/linux/commit/f0fe970df3838c202ef6c07a4c2b36838ef0a88b" ,
"refsource" : "MISC" ,
"url" : "https://github.com/torvalds/linux/commit/f0fe970df3838c202ef6c07a4c2b36838ef0a88b"
} ,
{
"name" : "DSA-3607" ,
"refsource" : "DEBIAN" ,
"url" : "http://www.debian.org/security/2016/dsa-3607"
} ,
{
"name" : "1036763" ,
"refsource" : "SECTRACK" ,
"url" : "http://www.securitytracker.com/id/1036763"
} ,
{
"name" : "https://github.com/torvalds/linux/commit/2f36db71009304b3f0b95afacd8eba1f9f046b87" ,
"refsource" : "CONFIRM" ,
"url" : "https://github.com/torvalds/linux/commit/2f36db71009304b3f0b95afacd8eba1f9f046b87"
} ,
{
"name" : "USN-3002-1" ,
"refsource" : "UBUNTU" ,
"url" : "http://www.ubuntu.com/usn/USN-3002-1"
} ,
{
"name" : "USN-2996-1" ,
"refsource" : "UBUNTU" ,
"url" : "http://www.ubuntu.com/usn/USN-2996-1"
} ,
{
"name" : "SUSE-SU-2016:1672" ,
"refsource" : "SUSE" ,
"url" : "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html"
} ,
{
"name" : "SUSE-SU-2016:2009" ,
"refsource" : "SUSE" ,
"url" : "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00021.html"
} ,
{
"name" : "SUSE-SU-2016:1596" ,
"refsource" : "SUSE" ,
"url" : "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00027.html"
} ,
{
"name" : "RHSA-2017:2760" ,
"refsource" : "REDHAT" ,
"url" : "https://access.redhat.com/errata/RHSA-2017:2760"
} ,
{
"name" : "SUSE-SU-2016:2005" ,
"refsource" : "SUSE" ,
"url" : "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00018.html"
} ,
{
"name" : "SUSE-SU-2016:2007" ,
"refsource" : "SUSE" ,
"url" : "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00020.html"
} ,
{
"name" : "USN-3007-1" ,
"refsource" : "UBUNTU" ,
"url" : "http://www.ubuntu.com/usn/USN-3007-1"
} ,
{
"name" : "SUSE-SU-2016:2000" ,
"refsource" : "SUSE" ,
"url" : "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00014.html"
} ,
{
"name" : "RHSA-2016:2124" ,
"refsource" : "REDHAT" ,
"url" : "http://rhn.redhat.com/errata/RHSA-2016-2124.html"
} ,
{
"name" : "USN-3003-1" ,
"refsource" : "UBUNTU" ,
"url" : "http://www.ubuntu.com/usn/USN-3003-1"
} ,
{
"name" : "SUSE-SU-2016:1995" ,
"refsource" : "SUSE" ,
"url" : "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00009.html"
} ,
{
"name" : "SUSE-SU-2016:2105" ,
"refsource" : "SUSE" ,
"url" : "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html"
} ,
{
"name" : "[oss-security] 20160622 Re: [vs-plain] Linux kernel stack overflow via ecryptfs and /proc/$pid/environ" ,
"refsource" : "MLIST" ,
"url" : "http://www.openwall.com/lists/oss-security/2016/06/22/1"
} ,
{
"name" : "SUSE-SU-2016:2002" ,
"refsource" : "SUSE" ,
"url" : "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00016.html"
} ,
{
"name" : "https://bugzilla.redhat.com/show_bug.cgi?id=1344721" ,
"refsource" : "CONFIRM" ,
"url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1344721"
} ,
{
"name" : "USN-2998-1" ,
"refsource" : "UBUNTU" ,
"url" : "http://www.ubuntu.com/usn/USN-2998-1"
} ,
{
"name" : "http://packetstormsecurity.com/files/137560/Linux-ecryptfs-Stack-Overflow.html" ,
"refsource" : "MISC" ,
"url" : "http://packetstormsecurity.com/files/137560/Linux-ecryptfs-Stack-Overflow.html"
} ,
{
"name" : "USN-3008-1" ,
"refsource" : "UBUNTU" ,
"url" : "http://www.ubuntu.com/usn/USN-3008-1"
} ,
{
"name" : "SUSE-SU-2016:1937" ,
"refsource" : "SUSE" ,
"url" : "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html"
}
]
}
}