NVD

Id
21031  
Name
CVE-2016-6136  
Description
Race condition in the audit_log_single_execve_arg function in kernel/auditsc.c in the Linux kernel through 4.7 allows local users to bypass intended character-set restrictions or disrupt system-call auditing by changing a certain string, aka a "double fetch" vulnerability.  
Reject
 
CVSS Version
2  
CVSS Score
1.9  
Severity
Low  
CVSS Base Score
1.9  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2016-08-06  
Modified Date
2016-11-28  
Seq
2016-6136  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
114470 21031 CVE-2016-6136 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=43761473c254b45883a64441dd0bc85a42f3645c  View
114471 21031 CVE-2016-6136 20160704 [CVE-2016-6136] Double-Fetch Vulnerability in Linux-4.6/kernel/auditsc.c  View
114472 21031 CVE-2016-6136 91558  View
114473 21031 CVE-2016-6136 https://bugzilla.kernel.org/show_bug.cgi?id=120681  View
114474 21031 CVE-2016-6136 https://bugzilla.redhat.com/show_bug.cgi?id=1353533  View
114475 21031 CVE-2016-6136 https://github.com/linux-audit/audit-kernel/issues/18  View
114476 21031 CVE-2016-6136 https://github.com/torvalds/linux/commit/43761473c254b45883a64441dd0bc85a42f3645c  View
114477 21031 CVE-2016-6136 https://source.android.com/security/bulletin/2016-11-01.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
3603 JVNDB-2016-004376 Linux Kernel の kernel/auditsc.c の audit_log_single_execve_arg 関数における文字セットの制限を回避される脆弱性 Linux Kernel の kernel/auditsc.c の audit_log_single_execve_arg 関数には、競合状態により、文字セットの制限を回避される、またはシステムコールの監査を中断される脆弱性が存在します。 CVE-2016-6136 92643 CVE-2016-6136 21031 1.9 4.7 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-004376.html 2016-07-20 2016-08-18 View