NVD

Id
19454  
Name
CVE-2016-3672  
Description
The arch_pick_mmap_layout function in arch/x86/mm/mmap.c in the Linux kernel through 4.5.2 does not properly randomize the legacy base address, which makes it easier for local users to defeat the intended restrictions on the ADDR_NO_RANDOMIZE flag, and bypass the ASLR protection mechanism for a setuid or setgid program, by disabling stack-consumption resource limits.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2016-04-27  
Modified Date
2016-12-02  
Seq
2016-3672  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
107106 19454 CVE-2016-3672 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8b8addf891de8a00e4d39fc32f93f7c5eb8feceb  View
107107 19454 CVE-2016-3672 http://hmarco.org/bugs/CVE-2016-3672-Unlimiting-the-stack-not-longer-dis  View
107108 19454 CVE-2016-3672 http://hmarco.org/bugs/CVE-2016-3672-Unlimiting-the-stack-not-longer-disables-ASLR.html  View
107109 19454 CVE-2016-3672 FEDORA-2016-76706f51a7  View
107110 19454 CVE-2016-3672 openSUSE-SU-2016:1641  View
107111 19454 CVE-2016-3672 SUSE-SU-2016:1690  View
107112 19454 CVE-2016-3672 SUSE-SU-2016:1937  View
107113 19454 CVE-2016-3672 SUSE-SU-2016:2105  View
107114 19454 CVE-2016-3672 openSUSE-SU-2016:2184  View
107115 19454 CVE-2016-3672 20160406 CVE-2016-3672 - Unlimiting the stack not longer disables ASLR  View
107116 19454 CVE-2016-3672 DSA-3607  View
107117 19454 CVE-2016-3672 20160406 CVE-2016-3672 - Unlimiting the stack not longer disables ASLR  View
107118 19454 CVE-2016-3672 85884  View
107119 19454 CVE-2016-3672 1035506  View
107120 19454 CVE-2016-3672 USN-2989-1  View
107121 19454 CVE-2016-3672 USN-2996-1  View
107122 19454 CVE-2016-3672 USN-2997-1  View
107123 19454 CVE-2016-3672 USN-2998-1  View
107124 19454 CVE-2016-3672 USN-3000-1  View
107125 19454 CVE-2016-3672 USN-3001-1  View
107126 19454 CVE-2016-3672 USN-3002-1  View
107127 19454 CVE-2016-3672 USN-3003-1  View
107128 19454 CVE-2016-3672 USN-3004-1  View
107129 19454 CVE-2016-3672 https://bugzilla.redhat.com/show_bug.cgi?id=1324749  View
107130 19454 CVE-2016-3672 https://github.com/torvalds/linux/commit/8b8addf891de8a00e4d39fc32f93f7c5eb8feceb  View
107131 19454 CVE-2016-3672 39669  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
1688 JVNDB-2016-002461 Linux Kernel の arch/x86/mm/mmap.c の arch_pick_mmap_layout 関数における ADDR_NO_RANDOMIZE フラグの制限を無効にされる脆弱性 Linux Kernel の arch/x86/mm/mmap.c の arch_pick_mmap_layout 関数は、レガシーのベースアドレスを適切にランダム化しないため、ADDR_NO_RANDOMIZE フラグの制限を無効にされ、setuid または setgid プログラムの ASLR 保護メカニズムを回避される脆弱性が存在します。 CVE-2016-3672 90178 CVE-2016-3672 19454 4.6 7.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-002461.html 2016-03-11 2016-10-28 View