NVD

Id
20353  
Name
CVE-2016-4805  
Description
Use-after-free vulnerability in drivers/net/ppp/ppp_generic.c in the Linux kernel before 4.5.2 allows local users to cause a denial of service (memory corruption and system crash, or spinlock) or possibly have unspecified other impact by removing a network namespace, related to the ppp_register_net_channel and ppp_unregister_channel functions.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2016-05-23  
Modified Date
2016-11-28  
Seq
2016-4805  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
111260 20353 CVE-2016-4805 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=1f461dcdd296eecedaffffc6bae2bfa90bd7eb89  View
111261 20353 CVE-2016-4805 openSUSE-SU-2016:1641  View
111262 20353 CVE-2016-4805 SUSE-SU-2016:1672  View
111263 20353 CVE-2016-4805 SUSE-SU-2016:1690  View
111264 20353 CVE-2016-4805 SUSE-SU-2016:1937  View
111265 20353 CVE-2016-4805 SUSE-SU-2016:1985  View
111266 20353 CVE-2016-4805 SUSE-SU-2016:2105  View
111267 20353 CVE-2016-4805 openSUSE-SU-2016:2184  View
111268 20353 CVE-2016-4805 DSA-3607  View
111269 20353 CVE-2016-4805 http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.2  View
111270 20353 CVE-2016-4805 [oss-security] 20160515 Re: CVE Requests: Linux: use-after-free issue for ppp channel  View
111271 20353 CVE-2016-4805 http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html  View
111272 20353 CVE-2016-4805 http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html  View
111273 20353 CVE-2016-4805 90605  View
111274 20353 CVE-2016-4805 USN-3021-1  View
111275 20353 CVE-2016-4805 USN-3021-2  View
111276 20353 CVE-2016-4805 CVE-2016-4805  View
111277 20353 CVE-2016-4805 https://bugzilla.redhat.com/show_bug.cgi?id=1335803  View
111278 20353 CVE-2016-4805 https://github.com/torvalds/linux/commit/1f461dcdd296eecedaffffc6bae2bfa90bd7eb89  View
111279 20353 CVE-2016-4805 https://lkml.org/lkml/2016/3/17/569  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
2116 JVNDB-2016-002889 Linux Kernel の drivers/net/ppp/ppp_generic.c におけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の drivers/net/ppp/ppp_generic.c には、解放済みメモリの使用 (Use-after-free) により、サービス運用妨害 (メモリ破損、システムクラッシュ、またはスピンロック) 状態にされるなど、不特定の影響を受ける脆弱性が存在します。 CVE-2016-4805 91311 CVE-2016-4805 20353 7.2 7.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-002889.html 2016-04-20 2016-10-27 View