CVE

Id
93007  
CVE No.
CVE-2016-6187  
Status
Candidate  
Description
The apparmor_setprocattr function in security/apparmor/lsm.c in the Linux kernel before 4.6.5 does not validate the buffer size, which allows local users to gain privileges by triggering an AppArmor setprocattr hook.  
Phase
Assigned (20160709)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
792178 93007 CVE-2016-6187 MLIST:[linux-kernel] 20160708 [GIT PULL] Fix for AppArmor oops in apparmor_setprocattr()  View
792179 93007 CVE-2016-6187 URL:http://marc.info/?l=linux-kernel&m=146793642811929&w=2  View
792180 93007 CVE-2016-6187 MLIST:[oss-security] 20160709 Re: CVE request: apparmor: oops in apparmor_setprocattr()  View
792181 93007 CVE-2016-6187 URL:http://www.openwall.com/lists/oss-security/2016/07/09/2  View
792182 93007 CVE-2016-6187 CONFIRM:http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=30a46a4647fd1df9cf52e43bf467f0d9265096ca  View
792183 93007 CVE-2016-6187 CONFIRM:http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.6.5  View
792184 93007 CVE-2016-6187 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1354383  View
792185 93007 CVE-2016-6187 CONFIRM:https://github.com/torvalds/linux/commit/30a46a4647fd1df9cf52e43bf467f0d9265096ca  View
792186 93007 CVE-2016-6187 BID:91696  View

Related JVN