Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
4.7
CVSSv2

CVE-2016-7916

Published: 16/11/2016 Updated: 18/01/2017
CVSS v2 Base Score: 4.7 | Impact Score: 6.9 | Exploitability Score: 3.4
CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8
VMScore: 419
Vector: AV:L/AC:M/Au:N/C:C/I:N/A:N
Subscribe to Linux

Vulnerability Summary

Race condition in the environ_read function in fs/proc/base.c in the Linux kernel prior to 4.5.4 allows local users to obtain sensitive information from kernel memory by reading a /proc/*/environ file during a process-setup time interval in which environment-variable copying is incomplete.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

linux linux kernel

Vendor Advisories

Ubuntu Security Notice: linux vulnerability
The system could be made to expose sensitive information ...
Ubuntu Security Notice: linux-ti-omap4 vulnerability
The system could be made to expose sensitive information ...
Ubuntu Security Notice: linux-lts-trusty vulnerabilities
Several security issues were fixed in the kernel ...
Ubuntu Security Notice: linux vulnerabilities
Several security issues were fixed in the kernel ...
Red Hat: CVE-2016-7916
Race condition in the environ_read() function in 'fs/proc/basec' in the Linux kernel before 454 allows local users to obtain sensitive information from kernel memory by reading a '/proc/*/environ' file during a process-setup time interval in which environment-variable copying is incomplete ...

References

CWE-362https://bugzilla.kernel.org/show_bug.cgi?id=116461http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8148a73c9901a8794a50f950083c00ccf97d43b3http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.4https://forums.grsecurity.net/viewtopic.php?f=3&t=4363https://github.com/torvalds/linux/commit/8148a73c9901a8794a50f950083c00ccf97d43b3http://source.android.com/security/bulletin/2016-11-01.htmlhttp://www.securityfocus.com/bid/94138http://www.ubuntu.com/usn/USN-3159-2http://www.ubuntu.com/usn/USN-3159-1https://nvd.nist.govhttps://usn.ubuntu.com/3159-1/
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-2907hardcodedinjectCVE-2024-20359CVE-2024-2467CVE-2024-4077CVE-2024-22391cameraCVE-2024-20353
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook