Lucene search

CVE-2016-4482

🗓️ 23 May 2016 10:00:59Reported by mitreType

cve🔗 web.nvd.nist.gov👁 111 Views🌐 4 Media mentions

The proc_connectinfo function in drivers/usb/core/devio.c in the Linux kernel through 4.6 does not initialize a certain data structure, allowing local users to obtain sensitive information from kernel stack memory via a crafted USBDEVFS_CONNECTINFO ioctl call

Reporter	Title	Published	Views	Family All 122
Fedora	[SECURITY] Fedora 24 Update: kernel-4.5.3-300.fc24	8 May 201610:31	–	fedora
Fedora	[SECURITY] Fedora 23 Update: kernel-4.4.9-300.fc23	12 May 201607:33	–	fedora
Fedora	[SECURITY] Fedora 22 Update: kernel-4.4.9-200.fc22	16 May 201614:56	–	fedora
NVD	CVE-2016-4482	23 May 201610:59	–	nvd
OpenVAS	Fedora Update for kernel FEDORA-2016-7d900003e6	8 Jun 201600:00	–	openvas
OpenVAS	Fedora Update for kernel FEDORA-2016-4	9 May 201600:00	–	openvas
OpenVAS	Fedora Update for kernel FEDORA-2016-a159c484e4	8 Jun 201600:00	–	openvas
OpenVAS	Ubuntu: Security Advisory (USN-3018-2)	28 Jun 201600:00	–	openvas
OpenVAS	Ubuntu: Security Advisory (USN-3016-1)	28 Jun 201600:00	–	openvas
OpenVAS	Ubuntu: Security Advisory (USN-3017-2)	28 Jun 201600:00	–	openvas

Nvd

Node

canonical ubuntu_linuxMatch12.04lts

canonical ubuntu_linuxMatch14.04lts

canonical ubuntu_linuxMatch15.10

canonical ubuntu_linuxMatch16.04lts

Node

linux linux_kernelRange≤4.6

Node

novell suse_linux_enterprise_software_development_kitMatch11.0sp4

novell suse_linux_enterprise_software_development_kitMatch12.0

novell suse_linux_enterprise_software_development_kitMatch12.0sp1

novell suse_linux_enterprise_debuginfoMatch11.0sp4

novell suse_linux_enterprise_desktopMatch12.0

novell suse_linux_enterprise_desktopMatch12.0sp1

novell suse_linux_enterprise_live_patchingMatch12.0

novell suse_linux_enterprise_module_for_public_cloudMatch12.0

novell suse_linux_enterprise_real_time_extensionMatch12.0sp1

novell suse_linux_enterprise_serverMatch11.0extra

novell suse_linux_enterprise_serverMatch11.0sp4

novell suse_linux_enterprise_serverMatch12.0

novell suse_linux_enterprise_serverMatch12.0sp1

novell suse_linux_enterprise_workstation_extensionMatch12.0

novell suse_linux_enterprise_workstation_extensionMatch12.0sp1

Node

fedoraproject fedoraMatch24

Source	Link
securityfocus	www.securityfocus.com/bid/90029
debian	www.debian.org/security/2016/dsa-3607
ubuntu	www.ubuntu.com/usn/USN-3017-2
lists	www.lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html
lists	www.lists.fedoraproject.org/pipermail/package-announce/2016-May/184414.html
lists	www.lists.opensuse.org/opensuse-security-announce/2016-06/msg00056.html
ubuntu	www.ubuntu.com/usn/USN-3016-1
lists	www.lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html
openwall	www.openwall.com/lists/oss-security/2016/05/04/2
github	www.github.com/torvalds/linux/commit/681fef8380eb818c0b845fca5d2ab1dcbab114ee

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

23 May 2016 10:59Current

6.0Medium risk

Vulners AI Score6.0

CVSS22.1

CVSS36.2

EPSS0.001

CWE-200