CVE

Id
87660  
CVE No.
CVE-2016-10154  
Status
Candidate  
Description
The smbhash function in fs/cifs/smbencrypt.c in the Linux kernel 4.9.x before 4.9.1 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a scatterlist.  
Phase
Assigned (20170120)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
764603 87660 CVE-2016-10154 MLIST:[oss-security] 20170120 Re: CVE REQUEST: linux kernel: process with pgid zero able to crash kernel  View
764604 87660 CVE-2016-10154 URL:http://www.openwall.com/lists/oss-security/2017/01/21/3  View
764605 87660 CVE-2016-10154 CONFIRM:http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=06deeec77a5a689cc94b21a8a91a76e42176685d  View
764606 87660 CVE-2016-10154 CONFIRM:http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.1  View
764607 87660 CVE-2016-10154 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1416104  View
764608 87660 CVE-2016-10154 CONFIRM:https://github.com/torvalds/linux/commit/06deeec77a5a689cc94b21a8a91a76e42176685d  View
764609 87660 CVE-2016-10154 BID:95714  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
26 JVNDB-2016-000027 EC-CUBE 用プラグイン「ヘルプ機能プラグイン」における SQL インジェクションの脆弱性 株式会社クオーレが提供する EC-CUBE 用プラグイン「ヘルプ機能プラグイン」には、SQL インジェクション (CWE-89) の脆弱性が存在します。 CVE-2016-1154 87660 7.5 7.3 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-000027.html  View