NVD

Id
20570  
Name
CVE-2016-5244  
Description
The rds_inc_info_copy function in net/rds/recv.c in the Linux kernel through 4.6.3 does not initialize a certain structure member, which allows remote attackers to obtain sensitive information from kernel stack memory by reading an RDS message.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2016-06-27  
Modified Date
2016-11-28  
Seq
2016-5244  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
112573 20570 CVE-2016-5244 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4116def2337991b39919f3b448326e21c40e0dbb  View
112574 20570 CVE-2016-5244 openSUSE-SU-2016:1641  View
112575 20570 CVE-2016-5244 SUSE-SU-2016:1672  View
112576 20570 CVE-2016-5244 SUSE-SU-2016:1690  View
112577 20570 CVE-2016-5244 SUSE-SU-2016:1937  View
112578 20570 CVE-2016-5244 SUSE-SU-2016:1985  View
112579 20570 CVE-2016-5244 SUSE-SU-2016:2105  View
112580 20570 CVE-2016-5244 openSUSE-SU-2016:2184  View
112581 20570 CVE-2016-5244 DSA-3607  View
112582 20570 CVE-2016-5244 [oss-security] 20160603 Re: CVE Request: rds: fix an infoleak in rds_inc_info_copy  View
112583 20570 CVE-2016-5244 91021  View
112584 20570 CVE-2016-5244 USN-3070-1  View
112585 20570 CVE-2016-5244 USN-3070-2  View
112586 20570 CVE-2016-5244 USN-3070-3  View
112587 20570 CVE-2016-5244 USN-3070-4  View
112588 20570 CVE-2016-5244 USN-3071-1  View
112589 20570 CVE-2016-5244 USN-3071-2  View
112590 20570 CVE-2016-5244 USN-3072-1  View
112591 20570 CVE-2016-5244 USN-3072-2  View
112592 20570 CVE-2016-5244 CVE-2016-5244  View
112593 20570 CVE-2016-5244 CVE-2016-5244  View
112594 20570 CVE-2016-5244 https://bugzilla.redhat.com/show_bug.cgi?id=1343337  View
112595 20570 CVE-2016-5244 https://github.com/torvalds/linux/commit/4116def2337991b39919f3b448326e21c40e0dbb  View
112596 20570 CVE-2016-5244 https://patchwork.ozlabs.org/patch/629110/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
2567 JVNDB-2016-003340 Linux Kernel の net/rds/recv.c の rds_inc_info_copy 関数におけるカーネルスタックメモリから重要な情報を取得される脆弱性 Linux Kernel の net/rds/recv.c の rds_inc_info_copy 関数は、特定の構造体メンバを初期化しないため、カーネルスタックメモリから重要な情報を取得される脆弱性が存在します。 CVE-2016-5244 91750 CVE-2016-5244 20570 5 7.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-003340.html 2016-06-02 2016-09-06 View