CVE

Id
87738  
CVE No.
CVE-2016-10225  
Status
Candidate  
Description
The sunxi-debug driver in Allwinner 3.4 legacy kernel for H3, A83T and H8 devices allows local users to gain root privileges by sending "rootmydevice" to /proc/sunxi_debug/sunxi_debug.  
Phase
Assigned (20170215)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
764994 87738 CVE-2016-10225 MLIST:[oss-security] 20161005 Re: CVE request: sunxi-debug (root privilege escalation in Allwinner kernel)  View
764995 87738 CVE-2016-10225 URL:http://www.openwall.com/lists/oss-security/2016/10/05/16  View
764996 87738 CVE-2016-10225 MLIST:[oss-security] 20170215 Re: CVE request: sunxi-debug (root privilege escalation in Allwinner kernel)  View
764997 87738 CVE-2016-10225 URL:http://www.openwall.com/lists/oss-security/2017/02/15/9  View
764998 87738 CVE-2016-10225 MISC:https://irclog.whitequark.org/linux-sunxi/2016-04-29#16314390  View
764999 87738 CVE-2016-10225 MISC:https://www.rapid7.com/db/modules/exploit/multi/local/allwinner_backdoor  View
765000 87738 CVE-2016-10225 CONFIRM:https://forum.armbian.com/index.php?/topic/1108-security-alert-for-allwinner-sun8i-h3a83th8/  View
765001 87738 CVE-2016-10225 BID:93442  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
507 JVNDB-2016-001280 Prosody の mod_dialback モジュールにおけるサーバになりすまされる脆弱性 Prosody の mod_dialback モジュールは、サーバ間のダイヤルバック認証のシークレットトークンのランダム値を適切に生成しないため、サーバになりすまされる脆弱性が存在します。 CVE-2016-1232 87738 5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-001280.html  View