NVD

Id
21842  
Name
CVE-2016-7425  
Description
The arcmsr_iop_message_xfer function in drivers/scsi/arcmsr/arcmsr_hba.c in the Linux kernel through 4.8.2 does not restrict a certain length field, which allows local users to gain privileges or cause a denial of service (heap-based buffer overflow) via an ARCMSR_MESSAGE_WRITE_WQBUFFER control code.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2016-10-16  
Modified Date
2017-01-06  
Seq
2016-7425  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
117129 21842 CVE-2016-7425 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=7bc2b55a5c030685b399bb65b6baa9ccc3d1f167  View
117130 21842 CVE-2016-7425 [linux-kernel] 20160915 [patch v2] arcmsr: buffer overflow in arcmsr_iop_message_xfer()  View
117131 21842 CVE-2016-7425 [linux-kernel] 20160915 Re: [patch v2] arcmsr: buffer overflow in arcmsr_iop_message_xfer()  View
117132 21842 CVE-2016-7425 [oss-security] 20160916 Re: linux kernel SCSI arcmsr driver: buffer overflow in arcmsr_iop_message_xfer()  View
117133 21842 CVE-2016-7425 93037  View
117134 21842 CVE-2016-7425 USN-3144-1  View
117135 21842 CVE-2016-7425 USN-3144-2  View
117136 21842 CVE-2016-7425 USN-3145-1  View
117137 21842 CVE-2016-7425 USN-3145-2  View
117138 21842 CVE-2016-7425 USN-3146-1  View
117139 21842 CVE-2016-7425 USN-3146-2  View
117140 21842 CVE-2016-7425 USN-3147-1  View
117141 21842 CVE-2016-7425 https://bugzilla.redhat.com/show_bug.cgi?id=1377330  View
117142 21842 CVE-2016-7425 https://github.com/torvalds/linux/commit/7bc2b55a5c030685b399bb65b6baa9ccc3d1f167  View
117143 21842 CVE-2016-7425 https://security-tracker.debian.org/tracker/CVE-2016-7425  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
4827 JVNDB-2016-005600 Linux Kernel の drivers/scsi/arcmsr/arcmsr_hba.c の arcmsr_iop_message_xfer 関数における権限を取得される脆弱性 Linux Kernel の drivers/scsi/arcmsr/arcmsr_hba.c の arcmsr_iop_message_xfer 関数は、特定の length フィールドを制限しないため、権限を取得される、またはサービス運用妨害 (ヒープベースのバッファオーバーフロー) 状態にされる脆弱性が存在します。 CVE-2016-7425 93932 CVE-2016-7425 21842 7.2 7.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-005600.html 2016-09-15 2016-10-25 View