NVD

Id
18608  
Name
CVE-2016-2383  
Description
The adjust_branches function in kernel/bpf/verifier.c in the Linux kernel before 4.5 does not consider the delta in the backward-jump case, which allows local users to obtain sensitive information from kernel memory by creating a packet filter and then loading crafted BPF instructions.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2016-04-27  
Modified Date
2016-12-02  
Seq
2016-2383  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
103136 18608 CVE-2016-2383 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a1b14d27ed0965838350f1377ff97c93ee383492  View
103137 18608 CVE-2016-2383 openSUSE-SU-2016:1008  View
103138 18608 CVE-2016-2383 [oss-security] 20160214 CVE Request: Linux: Incorrect branch fixups for eBPF allow arbitrary read  View
103139 18608 CVE-2016-2383 USN-2947-1  View
103140 18608 CVE-2016-2383 USN-2947-2  View
103141 18608 CVE-2016-2383 USN-2947-3  View
103142 18608 CVE-2016-2383 https://bugzilla.redhat.com/show_bug.cgi?id=1308452  View
103143 18608 CVE-2016-2383 https://github.com/torvalds/linux/commit/a1b14d27ed0965838350f1377ff97c93ee383492  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
1715 JVNDB-2016-002488 Linux Kernel の kernel/bpf/verifier.c の adjust_branches 関数におけるカーネルメモリから重要な情報を取得される脆弱性 Linux Kernel の kernel/bpf/verifier.c の adjust_branches 関数は、後方ジャンプ (backward-jump) の場合に delta を考慮しないため、カーネルメモリから重要な情報を取得される脆弱性が存在します。 CVE-2016-2383 88889 CVE-2016-2383 18608 2.1 5.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-002488.html 2016-02-10 2016-05-11 View