NVD

Id
22152  
Name
CVE-2016-8655  
Description
Race condition in net/packet/af_packet.c in the Linux kernel through 4.8.12 allows local users to gain privileges or cause a denial of service (use-after-free) by leveraging the CAP_NET_RAW capability to change a socket version, related to the packet_set_ring and packet_setsockopt functions.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-07-18  
Published
2016-12-08  
Modified Date
2017-07-17  
Seq
2016-8655  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
118210 22152 CVE-2016-8655 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=84ac7260236a49c79eede91617700174c2c19b0c  View
118211 22152 CVE-2016-8655 SUSE-SU-2016:3096  View
118212 22152 CVE-2016-8655 SUSE-SU-2016:3113  View
118213 22152 CVE-2016-8655 SUSE-SU-2016:3116  View
118214 22152 CVE-2016-8655 SUSE-SU-2016:3117  View
118215 22152 CVE-2016-8655 SUSE-SU-2016:3169  View
118216 22152 CVE-2016-8655 SUSE-SU-2016:3183  View
118217 22152 CVE-2016-8655 SUSE-SU-2016:3197  View
118218 22152 CVE-2016-8655 SUSE-SU-2016:3205  View
118219 22152 CVE-2016-8655 SUSE-SU-2016:3206  View
118220 22152 CVE-2016-8655 SUSE-SU-2016:3247  View
118221 22152 CVE-2016-8655 http://packetstormsecurity.com/files/140063/Linux-Kernel-4.4.0-AF_PACKET-Race-Condition-Privilege-Escalation.html  View
118222 22152 CVE-2016-8655 [oss-security] 20161206 CVE-2016-8655 Linux af_packet.c race condition (local root)  View
118223 22152 CVE-2016-8655 94692  View
118224 22152 CVE-2016-8655 1037403  View
118225 22152 CVE-2016-8655 USN-3149-1  View
118226 22152 CVE-2016-8655 USN-3149-2  View
118227 22152 CVE-2016-8655 USN-3150-1  View
118228 22152 CVE-2016-8655 USN-3150-2  View
118229 22152 CVE-2016-8655 USN-3151-1  View
118230 22152 CVE-2016-8655 USN-3151-2  View
118231 22152 CVE-2016-8655 USN-3151-3  View
118232 22152 CVE-2016-8655 USN-3151-4  View
118233 22152 CVE-2016-8655 USN-3152-1  View
118234 22152 CVE-2016-8655 USN-3152-2  View
118235 22152 CVE-2016-8655 https://bugzilla.redhat.com/show_bug.cgi?id=1400019  View
118236 22152 CVE-2016-8655 https://github.com/torvalds/linux/commit/84ac7260236a49c79eede91617700174c2c19b0c  View
118237 22152 CVE-2016-8655 40871  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
5352 JVNDB-2016-006125 Linux Kernel の net/packet/af_packet.c における権限を取得される脆弱性 Linux Kernel の net/packet/af_packet.c には、packet_set_ring および packet_setsockopt 関数に関する処理に不備があるため、競合状態により、権限を取得される、またはサービス運用妨害 (解放済みメモリの使用 (Use-after-free)) 状態にされる脆弱性が存在します。 CVE-2016-8655 95162 CVE-2016-8655 22152 7.2 7.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-006125.html 2016-12-01 2016-12-09 View