NVD

Id
20387  
Name
CVE-2016-4913  
Description
The get_rock_ridge_filename function in fs/isofs/rock.c in the Linux kernel before 4.5.5 mishandles NM (aka alternate name) entries containing characters, which allows local users to obtain sensitive information from kernel memory or possibly have unspecified other impact via a crafted isofs filesystem.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2016-05-23  
Modified Date
2016-11-28  
Seq
2016-4913  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
111395 20387 CVE-2016-4913 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=99d825822eade8d827a1817357cbf3f889a552d6  View
111396 20387 CVE-2016-4913 SUSE-SU-2016:1672  View
111397 20387 CVE-2016-4913 SUSE-SU-2016:1985  View
111398 20387 CVE-2016-4913 DSA-3607  View
111399 20387 CVE-2016-4913 http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.5  View
111400 20387 CVE-2016-4913 [oss-security] 20160518 CVE Request: Linux: information leak in Rock Ridge Extensions to iso9660 -- fs/isofs/rock.c  View
111401 20387 CVE-2016-4913 [oss-security] 20160518 Re: CVE Request: Linux: information leak in Rock Ridge Extensions to iso9660 -- fs/isofs/rock.c  View
111402 20387 CVE-2016-4913 http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html  View
111403 20387 CVE-2016-4913 http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html  View
111404 20387 CVE-2016-4913 90730  View
111405 20387 CVE-2016-4913 USN-3016-1  View
111406 20387 CVE-2016-4913 USN-3016-2  View
111407 20387 CVE-2016-4913 USN-3016-3  View
111408 20387 CVE-2016-4913 USN-3016-4  View
111409 20387 CVE-2016-4913 USN-3017-1  View
111410 20387 CVE-2016-4913 USN-3017-2  View
111411 20387 CVE-2016-4913 USN-3017-3  View
111412 20387 CVE-2016-4913 USN-3018-1  View
111413 20387 CVE-2016-4913 USN-3018-2  View
111414 20387 CVE-2016-4913 USN-3019-1  View
111415 20387 CVE-2016-4913 USN-3020-1  View
111416 20387 CVE-2016-4913 USN-3021-1  View
111417 20387 CVE-2016-4913 USN-3021-2  View
111418 20387 CVE-2016-4913 https://bugzilla.redhat.com/show_bug.cgi?id=1337528  View
111419 20387 CVE-2016-4913 https://github.com/torvalds/linux/commit/99d825822eade8d827a1817357cbf3f889a552d6  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
2117 JVNDB-2016-002890 Linux Kernel の fs/isofs/rock.c の get_rock_ridge_filename 関数におけるカーネルメモリから重要な情報を取得される脆弱性 Linux Kernel の fs/isofs/rock.c の get_rock_ridge_filename 関数は、 文字を含む NM (別名 代替名 (alternate name)) エントリを誤って処理するため、カーネルメモリから重要な情報を取得されるなど、不特定の影響を受ける脆弱性が存在します。 CVE-2016-4913 91419 CVE-2016-4913 20387 7.2 7.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-002890.html 2016-05-18 2016-05-26 View