Attacker Value

Unknown

(0 users assessed)

Exploitability

Unknown

(0 users assessed)

User Interaction

None

Privileges Required

Low

Attack Vector

Local

0

CVE-2016-4805

Disclosure Date: May 23, 2016 •

CVE-2016-4805 CVSS v3 Base Score: 7.8

MITRE ATT&CK

Add MITRE ATT&CK tactics and techniques that apply to this CVE.

Description

Use-after-free vulnerability in drivers/net/ppp/ppp_generic.c in the Linux kernel before 4.5.2 allows local users to cause a denial of service (memory corruption and system crash, or spinlock) or possibly have unspecified other impact by removing a network namespace, related to the ppp_register_net_channel and ppp_unregister_channel functions.

Add Assessment

No one has assessed this topic. Be the first to add your voice to the community.

CVSS V3 Severity and Metrics

Data provided by the National Vulnerability Database (NVD)

Base Score:

7.8 High

Impact Score:

5.9

Exploitability Score:

1.8

Vector:

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector (AV):

Local

Attack Complexity (AC):

Low

Privileges Required (PR):

Low

User Interaction (UI):

None

Scope (S):

Unchanged

Confidentiality (C):

High

Integrity (I):

High

Availability (A):

High

Vendors

canonical,
linux,
novell,
oracle,
redhat

Products

enterprise linux 6.0,
enterprise linux 7.0,
linux 6,
linux kernel,
opensuse leap 42.1,
suse linux enterprise desktop 12.0,
suse linux enterprise live patching 12.0,
suse linux enterprise module for public cloud 12.0,
suse linux enterprise real time extension 11.0,
suse linux enterprise real time extension 12.0,
suse linux enterprise server 11.0,
suse linux enterprise server 12.0,
suse linux enterprise software development kit 11.0,
suse linux enterprise software development kit 12.0,
suse linux enterprise workstation extension 12.0,
ubuntu linux 12.04

References

Canonical

CVE-2016-4805 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4805)

BID-90605 (http://www.securityfocus.com/bid/90605)

Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html

http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html

USN-3021-2 (http://www.ubuntu.com/usn/USN-3021-2)

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit?id=1f461dcdd296eecedaffffc6bae2bfa90bd7eb89

https://github.com/torvalds/linux/commit/1f461dcdd296eecedaffffc6bae2bfa90bd7eb89

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html

DSA-3607 (http://www.debian.org/security/2016/dsa-3607)

SECTRACK-1036763 (http://www.securitytracker.com/id/1036763)

[oss-security] 20160515 Re: CVE Requests: Linux: use-after-free issue for ppp channel (http://www.openwall.com/lists/oss-security/2016/05/15/2)

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html

USN-3021-1 (http://www.ubuntu.com/usn/USN-3021-1)

http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.2

https://bugzilla.redhat.com/show_bug.cgi?id=1335803

http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html

Rapid7

Technical Analysis