NVD

Id
21272  
Name
CVE-2016-6516  
Description
Race condition in the ioctl_file_dedupe_range function in fs/ioctl.c in the Linux kernel through 4.7 allows local users to cause a denial of service (heap-based buffer overflow) or possibly gain privileges by changing a certain count value, aka a "double fetch" vulnerability.  
Reject
 
CVSS Version
2  
CVSS Score
4.4  
Severity
Medium  
CVSS Base Score
4.4  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2016-08-06  
Modified Date
2016-11-28  
Seq
2016-6516  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
115457 21272 CVE-2016-6516 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=10eec60ce79187686e052092e5383c99b4420a20  View
115458 21272 CVE-2016-6516 [oss-security] 20160731 CVE Request: Linux <= 4.5 double fetch leading to heap overflow  View
115459 21272 CVE-2016-6516 92259  View
115460 21272 CVE-2016-6516 https://bugzilla.redhat.com/show_bug.cgi?id=1362457  View
115461 21272 CVE-2016-6516 https://github.com/torvalds/linux/commit/10eec60ce79187686e052092e5383c99b4420a20  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
3610 JVNDB-2016-004383 Linux Kernel の fs/ioctl.c の ioctl_file_dedupe_range 関数におけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の fs/ioctl.c の ioctl_file_dedupe_range 関数には、サービス運用妨害 (ヒープベースのバッファオーバーフロー) 状態にされる、または権限を取得される脆弱性が存在します。 CVE-2016-6516 93023 CVE-2016-6516 21272 4.4 7.4 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-004383.html 2016-07-28 2016-08-18 View