NVD

Id
20191  
Name
CVE-2016-4578  
Description
sound/core/timer.c in the Linux kernel through 4.6 does not initialize certain r1 data structures, which allows local users to obtain sensitive information from kernel stack memory via crafted use of the ALSA timer interface, related to the (1) snd_timer_user_ccallback and (2) snd_timer_user_tinterrupt functions.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2016-05-23  
Modified Date
2016-11-28  
Seq
2016-4578  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
110267 20191 CVE-2016-4578 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9a47e9cff994f37f7f0dbd9ae23740d0f64f9fe6  View
110268 20191 CVE-2016-4578 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=e4ec8cc8039a7063e24204299b462bd1383184a5  View
110269 20191 CVE-2016-4578 openSUSE-SU-2016:1641  View
110270 20191 CVE-2016-4578 SUSE-SU-2016:1672  View
110271 20191 CVE-2016-4578 SUSE-SU-2016:1690  View
110272 20191 CVE-2016-4578 SUSE-SU-2016:1937  View
110273 20191 CVE-2016-4578 SUSE-SU-2016:1985  View
110274 20191 CVE-2016-4578 SUSE-SU-2016:2105  View
110275 20191 CVE-2016-4578 openSUSE-SU-2016:2184  View
110276 20191 CVE-2016-4578 DSA-3607  View
110277 20191 CVE-2016-4578 [oss-security] 20160511 Re: CVE Request: alsa: kernel information leak vulnerability in Linux sound/core/timer  View
110278 20191 CVE-2016-4578 90535  View
110279 20191 CVE-2016-4578 USN-3016-1  View
110280 20191 CVE-2016-4578 USN-3016-2  View
110281 20191 CVE-2016-4578 USN-3016-3  View
110282 20191 CVE-2016-4578 USN-3016-4  View
110283 20191 CVE-2016-4578 USN-3017-1  View
110284 20191 CVE-2016-4578 USN-3017-2  View
110285 20191 CVE-2016-4578 USN-3017-3  View
110286 20191 CVE-2016-4578 USN-3018-1  View
110287 20191 CVE-2016-4578 USN-3018-2  View
110288 20191 CVE-2016-4578 USN-3019-1  View
110289 20191 CVE-2016-4578 USN-3020-1  View
110290 20191 CVE-2016-4578 USN-3021-1  View
110291 20191 CVE-2016-4578 USN-3021-2  View
110292 20191 CVE-2016-4578 https://bugzilla.redhat.com/show_bug.cgi?id=1335215  View
110293 20191 CVE-2016-4578 https://github.com/torvalds/linux/commit/9a47e9cff994f37f7f0dbd9ae23740d0f64f9fe6  View
110294 20191 CVE-2016-4578 https://github.com/torvalds/linux/commit/e4ec8cc8039a7063e24204299b462bd1383184a5  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
2112 JVNDB-2016-002885 Linux Kernel の sound/core/timer.c におけるカーネルスタックメモリから重要な情報を取得される脆弱性 Linux Kernel の sound/core/timer.c は、特定の r1 データ構造を適切に初期化しないため、カーネルスタックメモリから重要な情報を取得される脆弱性が存在します。 CVE-2016-4578 91084 CVE-2016-4578 20191 2.1 5.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-002885.html 2016-05-04 2016-11-09 View