NVD

Id
20418  
Name
CVE-2016-4998  
Description
The IPT_SO_SET_REPLACE setsockopt implementation in the netfilter subsystem in the Linux kernel before 4.6 allows local users to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information from kernel heap memory by leveraging in-container root access to provide a crafted offset value that leads to crossing a ruleset blob boundary.  
Reject
 
CVSS Version
2  
CVSS Score
5.6  
Severity
Medium  
CVSS Base Score
5.6  
CVSS Impact Subscore
7.8  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:N/A:C)  
Pub Date
2017-01-19  
Published
2016-07-03  
Modified Date
2016-11-28  
Seq
2016-4998  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
111634 20418 CVE-2016-4998 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6e94e0cfb0887e4013b3b930fa6ab1fe6bb6ba91  View
111635 20418 CVE-2016-4998 SUSE-SU-2016:2105  View
111636 20418 CVE-2016-4998 openSUSE-SU-2016:2184  View
111637 20418 CVE-2016-4998 DSA-3607  View
111638 20418 CVE-2016-4998 [oss-security] 20160624 Linux CVE-2016-4997 (local privilege escalation) and CVE-2016-4998 (out of bounds memory access)  View
111639 20418 CVE-2016-4998 http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html  View
111640 20418 CVE-2016-4998 http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html  View
111641 20418 CVE-2016-4998 http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html  View
111642 20418 CVE-2016-4998 91451  View
111643 20418 CVE-2016-4998 1036171  View
111644 20418 CVE-2016-4998 USN-3016-1  View
111645 20418 CVE-2016-4998 USN-3016-2  View
111646 20418 CVE-2016-4998 USN-3016-3  View
111647 20418 CVE-2016-4998 USN-3016-4  View
111648 20418 CVE-2016-4998 USN-3017-1  View
111649 20418 CVE-2016-4998 USN-3017-2  View
111650 20418 CVE-2016-4998 USN-3017-3  View
111651 20418 CVE-2016-4998 USN-3018-1  View
111652 20418 CVE-2016-4998 USN-3018-2  View
111653 20418 CVE-2016-4998 USN-3019-1  View
111654 20418 CVE-2016-4998 USN-3020-1  View
111655 20418 CVE-2016-4998 https://bugzilla.redhat.com/show_bug.cgi?id=1349886  View
111656 20418 CVE-2016-4998 https://github.com/torvalds/linux/commit/6e94e0cfb0887e4013b3b930fa6ab1fe6bb6ba91  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
2678 JVNDB-2016-003451 Linux Kernel の netfilter サブシステムの IPT_SO_SET_REPLACE setsockopt の実装におけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の netfilter サブシステムの IPT_SO_SET_REPLACE setsockopt の実装には、サービス運用妨害 (境界外読み取り) 状態にされる、またはカーネルヒープメモリから重要な情報を取得される脆弱性が存在します。 CVE-2016-4998 91504 CVE-2016-4998 20418 5.6 7.1 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-003451.html 2016-03-23 2016-07-08 View