NVD

Id
18389  
Name
CVE-2016-2085  
Description
The evm_verify_hmac function in security/integrity/evm/evm_main.c in the Linux kernel before 4.5 does not properly copy data, which makes it easier for local users to forge MAC values via a timing side-channel attack.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2016-04-27  
Modified Date
2016-12-02  
Seq
2016-2085  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
101744 18389 CVE-2016-2085 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=613317bd212c585c20796c10afe5daaa95d4b0a1  View
101745 18389 CVE-2016-2085 USN-2946-1  View
101746 18389 CVE-2016-2085 USN-2946-2  View
101747 18389 CVE-2016-2085 USN-2947-1  View
101748 18389 CVE-2016-2085 USN-2947-2  View
101749 18389 CVE-2016-2085 USN-2947-3  View
101750 18389 CVE-2016-2085 USN-2948-1  View
101751 18389 CVE-2016-2085 USN-2948-2  View
101752 18389 CVE-2016-2085 USN-2949-1  View
101753 18389 CVE-2016-2085 https://bugzilla.redhat.com/show_bug.cgi?id=1324867  View
101754 18389 CVE-2016-2085 https://github.com/torvalds/linux/commit/613317bd212c585c20796c10afe5daaa95d4b0a1  View
101755 18389 CVE-2016-2085 https://people.canonical.com/~ubuntu-security/cve/2016/CVE-2016-2085.html  View
101756 18389 CVE-2016-2085 https://security-tracker.debian.org/tracker/CVE-2016-2085  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
1683 JVNDB-2016-002456 Linux Kernel の security/integrity/evm/evm_main.c の evm_verify_hmac 関数における MAC 値を偽造される脆弱性 Linux Kernel の security/integrity/evm/evm_main.c の evm_verify_hmac 関数は、データを適切にコピーしないため、MAC 値を偽造される脆弱性が存在します。 CVE-2016-2085 88591 CVE-2016-2085 18389 2.1 5.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-002456.html 2016-02-12 2016-09-06 View