Published: 29/06/2016 Updated: 28/11/2016

CVSS v2 Base Score: 4.9 | Impact Score: 6.9 | Exploitability Score: 3.9

CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8

VMScore: 437

Vector: AV:L/AC:L/Au:N/C:C/I:N/A:N

nfsd in the Linux kernel up to and including 4.6.3 allows local users to bypass intended file-permission restrictions by setting a POSIX ACL, related to nfs2acl.c, nfs3acl.c, and nfs4acl.c.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks CVE-2015-7515, CVE-2016-2184, CVE-2016-2185, CVE-2016-2186, CVE-2016-2187, CVE-2016-3136, CVE-2016-3137, CVE-2016-3138, CVE-2016-3140 Ralf Spenneberg of OpenSource Sec ...

Several security issues were fixed in the kernel ...

It was found that nfsd is missing permissions check when setting ACL on files, this may allow a local users to gain access to any file by setting a crafted ACL (CVE-2016-1237) A flaw was found in the Linux kernel's keyring handling code, where in key_reject_and_link() an uninitialised variable would eventually lead to arbitrary free address which ...

It was found that nfsd is missing permissions check when setting ACL on files, this may allow a local users to gain access to any file by setting a crafted ACL ...

CWE-284 https://bugzilla.redhat.com/show_bug.cgi?id=1350845 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=999653786df6954a31044528ac3f7a5dadca08f4 http://www.openwall.com/lists/oss-security/2016/06/25/2 https://github.com/torvalds/linux/commit/999653786df6954a31044528ac3f7a5dadca08f4 http://www.ubuntu.com/usn/USN-3070-2 http://www.securityfocus.com/bid/91456 http://www.ubuntu.com/usn/USN-3070-1 http://www.ubuntu.com/usn/USN-3053-1 http://www.debian.org/security/2016/dsa-3607 http://www.ubuntu.com/usn/USN-3070-3 http://www.ubuntu.com/usn/USN-3070-4 https://nvd.nist.gov https://www.debian.org/security/./dsa-3607 https://usn.ubuntu.com/3053-1/

CVE-2016-1237

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect