NVD

Id
20349  
Name
CVE-2016-4794  
Description
Use-after-free vulnerability in mm/percpu.c in the Linux kernel through 4.6 allows local users to cause a denial of service (BUG) or possibly have unspecified other impact via crafted use of the mmap and bpf system calls.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2016-05-23  
Modified Date
2017-01-17  
Seq
2016-4794  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
111235 20349 CVE-2016-4794 [oss-security] 20160512 Linux Kernel bpf related UAF  View
111236 20349 CVE-2016-4794 90625  View
111237 20349 CVE-2016-4794 USN-3053-1  View
111238 20349 CVE-2016-4794 USN-3054-1  View
111239 20349 CVE-2016-4794 USN-3055-1  View
111240 20349 CVE-2016-4794 USN-3056-1  View
111241 20349 CVE-2016-4794 USN-3057-1  View
111242 20349 CVE-2016-4794 https://bugzilla.redhat.com/show_bug.cgi?id=1335889  View
111243 20349 CVE-2016-4794 [linux-kernel] 20160417 Re: bpf: use-after-free in array_map_alloc  View
111244 20349 CVE-2016-4794 https://source.android.com/security/bulletin/2016-12-01.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
2115 JVNDB-2016-002888 Linux Kernel の mm/percpu.c in におけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の mm/percpu.c in には、解放済みメモリの使用 (Use-after-free) により、サービス運用妨害 (バグ) 状態にされるなど、不特定の影響を受ける脆弱性が存在します。 CVE-2016-4794 91300 CVE-2016-4794 20349 7.2 7.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-002888.html 2016-05-13 2016-05-26 View