NVD

Id
17180  
Name
CVE-2016-0821  
Description
The LIST_POISON feature in include/linux/poison.h in the Linux kernel before 4.3, as used in Android 6.0.1 before 2016-03-01, does not properly consider the relationship to the mmap_min_addr value, which makes it easier for attackers to bypass a poison-pointer protection mechanism by triggering the use of an uninitialized list entry, aka Android internal bug 26186802, a different vulnerability than CVE-2015-3636.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2016-03-12  
Modified Date
2016-11-30  
Seq
2016-0821  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
95577 17180 CVE-2016-0821 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8a5e5e02fc83aaf67053ab53b359af08c6c49aaf  View
95578 17180 CVE-2016-0821 http://source.android.com/security/bulletin/2016-03-01.html  View
95579 17180 CVE-2016-0821 DSA-3607  View
95580 17180 CVE-2016-0821 [oss-security] 20150502 Re: CVE request for a fixed bug existed in all versions of linux kernel from KeenTeam  View
95581 17180 CVE-2016-0821 84260  View
95582 17180 CVE-2016-0821 USN-2967-1  View
95583 17180 CVE-2016-0821 USN-2967-2  View
95584 17180 CVE-2016-0821 USN-2968-1  View
95585 17180 CVE-2016-0821 USN-2968-2  View
95586 17180 CVE-2016-0821 USN-2969-1  View
95587 17180 CVE-2016-0821 USN-2970-1  View
95588 17180 CVE-2016-0821 USN-2971-1  View
95589 17180 CVE-2016-0821 USN-2971-2  View
95590 17180 CVE-2016-0821 USN-2971-3  View
95591 17180 CVE-2016-0821 https://github.com/torvalds/linux/commit/8a5e5e02fc83aaf67053ab53b359af08c6c49aaf  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
1025 JVNDB-2016-001798 Android で使用される Linux Kernel の include/linux/poison.h におけるポイズンポインタ保護メカニズムを回避される脆弱性 Android で使用される Linux Kernel の include/linux/poison.h の LIST_POISON 関数は、mmap_min_addr 値との関係を適切に考慮しないため、ポイズンポインタ (poison-pointer) 保護メカニズムを回避される脆弱性が存在します。 CVE-2016-0821 87025 CVE-2016-0821 17180 5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-001798.html 2016-03-07 2016-03-22 View