NVD

Id
20417  
Name
CVE-2016-4997  
Description
The compat IPT_SO_SET_REPLACE and IP6T_SO_SET_REPLACE setsockopt implementations in the netfilter subsystem in the Linux kernel before 4.6.3 allow local users to gain privileges or cause a denial of service (memory corruption) by leveraging in-container root access to provide a crafted offset value that triggers an unintended decrement.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2016-07-03  
Modified Date
2016-12-02  
Seq
2016-4997  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
111596 20417 CVE-2016-4997 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ce683e5f9d045e5d67d1312a42b359cb2ab2a13c  View
111597 20417 CVE-2016-4997 SUSE-SU-2016:1709  View
111598 20417 CVE-2016-4997 SUSE-SU-2016:1710  View
111599 20417 CVE-2016-4997 SUSE-SU-2016:1937  View
111600 20417 CVE-2016-4997 SUSE-SU-2016:1985  View
111601 20417 CVE-2016-4997 SUSE-SU-2016:2018  View
111602 20417 CVE-2016-4997 SUSE-SU-2016:2105  View
111603 20417 CVE-2016-4997 SUSE-SU-2016:2174  View
111604 20417 CVE-2016-4997 SUSE-SU-2016:2177  View
111605 20417 CVE-2016-4997 SUSE-SU-2016:2178  View
111606 20417 CVE-2016-4997 SUSE-SU-2016:2179  View
111607 20417 CVE-2016-4997 SUSE-SU-2016:2180  View
111608 20417 CVE-2016-4997 SUSE-SU-2016:2181  View
111609 20417 CVE-2016-4997 openSUSE-SU-2016:2184  View
111610 20417 CVE-2016-4997 DSA-3607  View
111611 20417 CVE-2016-4997 http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.6.3  View
111612 20417 CVE-2016-4997 [oss-security] 20160624 Linux CVE-2016-4997 (local privilege escalation) and CVE-2016-4998 (out of bounds memory access)  View
111613 20417 CVE-2016-4997 [oss-security] 20160929 CVE request - Linux kernel through 4.6.2 allows escalade privileges via IP6T_SO_SET_REPLACE compat setsockopt call  View
111614 20417 CVE-2016-4997 http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html  View
111615 20417 CVE-2016-4997 http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html  View
111616 20417 CVE-2016-4997 http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html  View
111617 20417 CVE-2016-4997 91451  View
111618 20417 CVE-2016-4997 1036171  View
111619 20417 CVE-2016-4997 USN-3016-1  View
111620 20417 CVE-2016-4997 USN-3016-2  View
111621 20417 CVE-2016-4997 USN-3016-3  View
111622 20417 CVE-2016-4997 USN-3016-4  View
111623 20417 CVE-2016-4997 USN-3017-1  View
111624 20417 CVE-2016-4997 USN-3017-2  View
111625 20417 CVE-2016-4997 USN-3017-3  View
111626 20417 CVE-2016-4997 USN-3018-1  View
111627 20417 CVE-2016-4997 USN-3018-2  View
111628 20417 CVE-2016-4997 USN-3019-1  View
111629 20417 CVE-2016-4997 USN-3020-1  View
111630 20417 CVE-2016-4997 https://bugzilla.redhat.com/show_bug.cgi?id=1349722  View
111631 20417 CVE-2016-4997 https://github.com/nccgroup/TriforceLinuxSyscallFuzzer/tree/master/crash_reports/report_compatIpt  View
111632 20417 CVE-2016-4997 https://github.com/torvalds/linux/commit/ce683e5f9d045e5d67d1312a42b359cb2ab2a13c  View
111633 20417 CVE-2016-4997 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05347541  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
2639 JVNDB-2016-003412 Linux Kernel の netfilter サブシステムの compat IPT_SO_SET_REPLACE setsockopt の実装における権限を取得される脆弱性 Linux Kernel の netfilter サブシステムの compat IPT_SO_SET_REPLACE setsockopt の実装には、権限を取得される、またはサービス運用妨害 (メモリ破損) 状態にされる脆弱性が存在します。 CVE-2016-4997 91503 CVE-2016-4997 20417 7.2 7.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-003412.html 2016-06-24 2016-11-17 View