Published: 13/06/2016 Updated: 30/10/2018

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

CVSS v3 Base Score: 5.3 | Impact Score: 1.4 | Exploitability Score: 3.9

VMScore: 446

Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N

The socket_create function in common/socket.c in libimobiledevice and libusbmuxd allows remote malicious users to bypass intended access restrictions and communicate with services on iOS devices by connecting to an IPv4 TCP socket.

Vulnerable Product	Search on Vulmon	Subscribe to Product
libimobiledevice libusbmuxd
libimobiledevice libimobiledevice
canonical ubuntu linux 14.04
canonical ubuntu linux 16.04
canonical ubuntu linux 15.10
opensuse opensuse 13.2
opensuse leap 42.1

Debian Bug report logs - #825553 libimobiledevice: CVE-2016-5104: Sockets listening on INADDR_ANY Package: src:libimobiledevice; Maintainer for src:libimobiledevice is gtkpod Maintainers <pkg-gtkpod-devel@alioth-listsdebiannet>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Fri, 27 May 2016 18:33:02 UT ...

libusbmuxd would allow unintended access to devices over the network ...

libimobiledevice would allow unintended access to devices over the network ...

The socket_create function in common/socketc in libimobiledevice and libusbmuxd allows remote attackers to bypass intended access restrictions and communicate with services on iOS devices by connecting to an IPv4 TCP socket ...

The socket_create function in common/socketc in libimobiledevice and libusbmuxd allows remote attackers on the local network to bypass intended access restrictions and communicate with services on affected devices by connecting to an IPv4 TCP socket ...

CWE-284 http://lists.opensuse.org/opensuse-updates/2016-06/msg00029.html https://bugzilla.redhat.com/show_bug.cgi?id=1339988 http://www.openwall.com/lists/oss-security/2016/05/26/6 https://github.com/libimobiledevice/libusbmuxd/commit/4397b3376dc4e4cb1c991d0aed61ce6482614196 https://github.com/libimobiledevice/libimobiledevice/commit/df1f5c4d70d0c19ad40072f5246ca457e7f9849e http://www.openwall.com/lists/oss-security/2016/05/26/1 http://www.ubuntu.com/usn/USN-3026-1 http://www.ubuntu.com/usn/USN-3026-2 http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00042.html https://lists.debian.org/debian-lts-announce/2020/02/msg00027.html https://lists.debian.org/debian-lts-announce/2020/02/msg00028.html https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=825553 https://nvd.nist.gov https://usn.ubuntu.com/3026-2/

CVE-2016-5104

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect