Published: 27/06/2016 Updated: 12/02/2023

CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9

CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8

VMScore: 642

Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

Subscribe to Redhat

Integer overflow in lib/asn1_decoder.c in the Linux kernel prior to 4.6 allows local users to gain privileges via crafted ASN.1 data.

Vulnerable Product	Search on Vulmon	Subscribe to Product
redhat enterprise linux desktop 7.0
redhat enterprise linux server aus 7.2
redhat enterprise linux workstation 7.0
redhat enterprise linux server 7.0
redhat enterprise linux hpc node 7.0
redhat enterprise linux server eus 7.2
redhat enterprise linux hpc node eus 7.2
linux linux kernel
canonical ubuntu linux 16.04

The Linux kernel did not properly suppress hugetlbfs support in x86 PV guests, which could allow local PV guest users to cause a denial of service (guest OS crash) by attempting to access a hugetlbfs mapped area (CVE-2016-3961 / XSA-174) A flaw was found in the way the Linux kernel's ASN1 DER decoder processed certain certificate files with tags ...

The system could be made to crash or run programs as an administrator ...

Several security issues were fixed in the kernel ...

The system could be made to crash or run programs as an administrator ...

The system could be made to crash or run programs as an administrator ...

The system could be made to crash or run programs as an administrator ...

Several security issues were fixed in the kernel ...

Several security issues were fixed in the kernel ...

The system could be made to crash or run programs as an administrator ...

The system could be made to crash or run programs as an administrator ...

The system could be made to crash or run programs as an administrator ...

Several security issues were fixed in the kernel ...

A flaw was found in the way the Linux kernel's ASN1 DER decoder processed certain certificate files with tags of indefinite length A local, unprivileged user could use a specially crafted X509 certificate DER file to crash the system or, potentially, escalate his or her privileges on the system ...

NVD-CWE-Other https://bugzilla.redhat.com/show_bug.cgi?id=1300257 http://www.openwall.com/lists/oss-security/2016/05/12/9 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=23c8a812dc3c621009e4f0e5342aa4e2ede1ceaa https://github.com/torvalds/linux/commit/23c8a812dc3c621009e4f0e5342aa4e2ede1ceaa http://rhn.redhat.com/errata/RHSA-2016-1033.html http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html http://rhn.redhat.com/errata/RHSA-2016-1051.html http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html https://h20565.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158555 http://rhn.redhat.com/errata/RHSA-2016-1055.html http://www.ubuntu.com/usn/USN-2979-4 http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html http://source.android.com/security/bulletin/2016-10-01.html http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00009.html http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00014.html http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00016.html http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00003.html http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00026.html http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00019.html http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00020.html http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00022.html http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00015.html http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00008.html http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00017.html http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00023.html http://www.securityfocus.com/bid/90626 http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00018.html http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00021.html https://nvd.nist.gov https://alas.aws.amazon.com/ALAS-2016-703.html https://usn.ubuntu.com/2975-2/

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook