NVD

Id
18414  
Name
CVE-2016-2117  
Description
The atl2_probe function in drivers/net/ethernet/atheros/atlx/atl2.c in the Linux kernel through 4.5.2 incorrectly enables scatter/gather I/O, which allows remote attackers to obtain sensitive information from kernel memory by reading packet data.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2016-05-02  
Modified Date
2016-11-28  
Seq
2016-2117  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
102264 18414 CVE-2016-2117 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f43bfaeddc79effbf3d0fcb53ca477cca66f3db8  View
102265 18414 CVE-2016-2117 DSA-3607  View
102266 18414 CVE-2016-2117 [oss-security] 20160316 CVE-2016-2117 memory disclosure to ethernet due to unchecked scatter/gather IO  View
102267 18414 CVE-2016-2117 http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html  View
102268 18414 CVE-2016-2117 http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html  View
102269 18414 CVE-2016-2117 84500  View
102270 18414 CVE-2016-2117 USN-2989-1  View
102271 18414 CVE-2016-2117 USN-2998-1  View
102272 18414 CVE-2016-2117 USN-3000-1  View
102273 18414 CVE-2016-2117 USN-3001-1  View
102274 18414 CVE-2016-2117 USN-3002-1  View
102275 18414 CVE-2016-2117 USN-3003-1  View
102276 18414 CVE-2016-2117 USN-3004-1  View
102277 18414 CVE-2016-2117 USN-3005-1  View
102278 18414 CVE-2016-2117 USN-3006-1  View
102279 18414 CVE-2016-2117 USN-3007-1  View
102280 18414 CVE-2016-2117 https://bugzilla.redhat.com/show_bug.cgi?id=1312298  View
102281 18414 CVE-2016-2117 https://github.com/torvalds/linux/commit/f43bfaeddc79effbf3d0fcb53ca477cca66f3db8  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
1675 JVNDB-2016-002448 Linux Kernel の drivers/net/ethernet/atheros/atlx/atl2.c の atl2_probe 関数におけるカーネルメモリから重要な情報を取得される脆弱性 Linux Kernel の drivers/net/ethernet/atheros/atlx/atl2.c の atl2_probe 関数は、scatter/gather I/O を不正に有効にするため、カーネルメモリから重要な情報を取得される脆弱性が存在します。 CVE-2016-2117 88623 CVE-2016-2117 18414 5 7.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-002448.html 2016-04-21 2016-11-17 View