2017-10-16 12:31:07 -04:00
{
2023-02-02 21:02:25 +00:00
"data_version" : "4.0" ,
"data_type" : "CVE" ,
"data_format" : "MITRE" ,
2019-03-17 22:02:33 +00:00
"CVE_data_meta" : {
"ID" : "CVE-2016-9576" ,
2023-02-02 21:02:25 +00:00
"ASSIGNER" : "secalert@redhat.com" ,
2019-03-17 22:02:33 +00:00
"STATE" : "PUBLIC"
} ,
2023-02-02 21:02:25 +00:00
"description" : {
"description_data" : [
{
"lang" : "eng" ,
"value" : "It was found that the blk_rq_map_user_iov() function in the Linux kernel's block device implementation did not properly restrict the type of iterator, which could allow a local attacker to read or write to arbitrary kernel memory locations or cause a denial of service (use-after-free) by leveraging write access to a /dev/sg device."
}
]
} ,
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng" ,
"value" : "Use After Free" ,
"cweId" : "CWE-416"
}
]
}
]
} ,
2019-03-17 22:02:33 +00:00
"affects" : {
"vendor" : {
"vendor_data" : [
{
2023-02-02 21:02:25 +00:00
"vendor_name" : "Red Hat" ,
2019-03-17 22:02:33 +00:00
"product" : {
"product_data" : [
{
2023-02-02 21:02:25 +00:00
"product_name" : "Red Hat Enterprise Linux 6" ,
2019-03-17 22:02:33 +00:00
"version" : {
"version_data" : [
{
2023-02-02 21:02:25 +00:00
"version_value" : "0:2.6.32-696.el6" ,
"version_affected" : "!"
}
]
}
} ,
{
"product_name" : "Red Hat Enterprise Linux 7" ,
"version" : {
"version_data" : [
{
"version_value" : "0:3.10.0-693.rt56.617.el7" ,
"version_affected" : "!"
} ,
{
"version_value" : "0:3.10.0-693.el7" ,
"version_affected" : "!"
}
]
}
} ,
{
"product_name" : "Red Hat Enterprise MRG 2" ,
"version" : {
"version_data" : [
{
"version_value" : "1:3.10.0-693.2.1.rt56.585.el6rt" ,
"version_affected" : "!"
2019-03-17 22:02:33 +00:00
}
]
}
}
]
2023-02-02 21:02:25 +00:00
}
2019-03-17 22:02:33 +00:00
}
2017-10-16 12:31:07 -04:00
]
2019-03-17 22:02:33 +00:00
}
} ,
"references" : {
"reference_data" : [
{
2023-02-02 21:02:25 +00:00
"url" : "https://access.redhat.com/errata/RHSA-2017:2669" ,
"refsource" : "MISC" ,
"name" : "https://access.redhat.com/errata/RHSA-2017:2669"
} ,
{
"url" : "https://access.redhat.com/errata/RHSA-2017:1842" ,
"refsource" : "MISC" ,
"name" : "https://access.redhat.com/errata/RHSA-2017:1842"
} ,
{
"url" : "https://access.redhat.com/errata/RHSA-2017:2077" ,
"refsource" : "MISC" ,
"name" : "https://access.redhat.com/errata/RHSA-2017:2077"
2019-03-17 22:02:33 +00:00
} ,
{
2023-02-02 21:02:25 +00:00
"url" : "http://rhn.redhat.com/errata/RHSA-2017-0817.html" ,
"refsource" : "MISC" ,
"name" : "http://rhn.redhat.com/errata/RHSA-2017-0817.html"
2019-03-17 22:02:33 +00:00
} ,
{
2023-02-02 21:02:25 +00:00
"url" : "https://access.redhat.com/errata/RHSA-2017:0817" ,
"refsource" : "MISC" ,
"name" : "https://access.redhat.com/errata/RHSA-2017:0817"
2019-03-17 22:02:33 +00:00
} ,
{
2023-02-02 21:02:25 +00:00
"url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a0ac402cfcdc904f9772e1762b3fda112dcc56a0" ,
"refsource" : "MISC" ,
"name" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a0ac402cfcdc904f9772e1762b3fda112dcc56a0"
2019-03-17 22:02:33 +00:00
} ,
{
2023-02-02 21:02:25 +00:00
"url" : "http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00040.html" ,
"refsource" : "MISC" ,
"name" : "http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00040.html"
2019-03-17 22:02:33 +00:00
} ,
{
2023-02-02 21:02:25 +00:00
"url" : "http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00041.html" ,
"refsource" : "MISC" ,
"name" : "http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00041.html"
2019-03-17 22:02:33 +00:00
} ,
{
2023-02-02 21:02:25 +00:00
"url" : "http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00057.html" ,
"refsource" : "MISC" ,
"name" : "http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00057.html"
2019-03-17 22:02:33 +00:00
} ,
{
2023-02-02 21:02:25 +00:00
"url" : "http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00062.html" ,
"refsource" : "MISC" ,
"name" : "http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00062.html"
2019-03-17 22:02:33 +00:00
} ,
{
2023-02-02 21:02:25 +00:00
"url" : "http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00072.html" ,
"refsource" : "MISC" ,
"name" : "http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00072.html"
2019-03-17 22:02:33 +00:00
} ,
{
2023-02-02 21:02:25 +00:00
"url" : "http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00075.html" ,
"refsource" : "MISC" ,
"name" : "http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00075.html"
2019-03-17 22:02:33 +00:00
} ,
{
2023-02-02 21:02:25 +00:00
"url" : "http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00081.html" ,
"refsource" : "MISC" ,
"name" : "http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00081.html"
2019-03-17 22:02:33 +00:00
} ,
{
2023-02-02 21:02:25 +00:00
"url" : "http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00088.html" ,
"refsource" : "MISC" ,
"name" : "http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00088.html"
2019-03-17 22:02:33 +00:00
} ,
{
2023-02-02 21:02:25 +00:00
"url" : "http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00091.html" ,
"refsource" : "MISC" ,
"name" : "http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00091.html"
2019-03-17 22:02:33 +00:00
} ,
{
2023-02-02 21:02:25 +00:00
"url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.14" ,
"refsource" : "MISC" ,
"name" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.14"
2019-03-17 22:02:33 +00:00
} ,
{
2023-02-02 21:02:25 +00:00
"url" : "http://www.openwall.com/lists/oss-security/2016/12/08/19" ,
"refsource" : "MISC" ,
"name" : "http://www.openwall.com/lists/oss-security/2016/12/08/19"
2019-03-17 22:02:33 +00:00
} ,
{
2023-02-02 21:02:25 +00:00
"url" : "http://www.securityfocus.com/bid/94821" ,
"refsource" : "MISC" ,
"name" : "http://www.securityfocus.com/bid/94821"
2019-03-17 22:02:33 +00:00
} ,
{
2023-02-02 21:02:25 +00:00
"url" : "https://access.redhat.com/security/cve/CVE-2016-9576" ,
"refsource" : "MISC" ,
"name" : "https://access.redhat.com/security/cve/CVE-2016-9576"
2019-03-17 22:02:33 +00:00
} ,
{
2023-02-02 21:02:25 +00:00
"url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1403145" ,
"refsource" : "MISC" ,
"name" : "https://bugzilla.redhat.com/show_bug.cgi?id=1403145"
2019-03-17 22:02:33 +00:00
} ,
{
2023-02-02 21:02:25 +00:00
"url" : "https://github.com/torvalds/linux/commit/a0ac402cfcdc904f9772e1762b3fda112dcc56a0" ,
"refsource" : "MISC" ,
"name" : "https://github.com/torvalds/linux/commit/a0ac402cfcdc904f9772e1762b3fda112dcc56a0"
}
]
} ,
"impact" : {
"cvss" : [
{
"accessComplexity" : "HIGH" ,
"accessVector" : "LOCAL" ,
"authentication" : "NONE" ,
"availabilityImpact" : "COMPLETE" ,
"availabilityRequirement" : "NOT_DEFINED" ,
"baseScore" : 6.2 ,
"collateralDamagePotential" : "NOT_DEFINED" ,
"confidentialityImpact" : "COMPLETE" ,
"confidentialityRequirement" : "NOT_DEFINED" ,
"environmentalScore" : 0 ,
"exploitability" : "NOT_DEFINED" ,
"integrityImpact" : "COMPLETE" ,
"integrityRequirement" : "NOT_DEFINED" ,
"remediationLevel" : "NOT_DEFINED" ,
"reportConfidence" : "NOT_DEFINED" ,
"targetDistribution" : "NOT_DEFINED" ,
"temporalScore" : 0 ,
"vectorString" : "AV:L/AC:H/Au:N/C:C/I:C/A:C" ,
"version" : "2.0"
} ,
{
"attackComplexity" : "HIGH" ,
"attackVector" : "LOCAL" ,
"availabilityImpact" : "HIGH" ,
"baseScore" : 7 ,
"baseSeverity" : "HIGH" ,
"confidentialityImpact" : "HIGH" ,
"integrityImpact" : "HIGH" ,
"privilegesRequired" : "LOW" ,
"scope" : "UNCHANGED" ,
"userInteraction" : "NONE" ,
"vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" ,
"version" : "3.0"
2019-03-17 22:02:33 +00:00
}
]
}
}
