Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2016-5104
HistoryJun 13, 2016 - 2:59 p.m.

CVE-2016-5104

2016-06-1314:59:08
CWE-284
[email protected]
web.nvd.nist.gov
67
cve-2016-5104
socket_create function
libimobiledevice
libusbmuxd
access restrictions
ios devices
remote attackers
nvd

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

5.3 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.005 Low

EPSS

Percentile

76.8%

JSON

The socket_create function in common/socket.c in libimobiledevice and libusbmuxd allows remote attackers to bypass intended access restrictions and communicate with services on iOS devices by connecting to an IPv4 TCP socket.

Affected configurations

NVD
Node
libimobiledevicelibimobiledeviceRange≤1.2.0
OR
libimobiledevicelibusbmuxdRange≤1.0.10
Node
canonicalubuntu_linuxMatch14.04lts
OR
canonicalubuntu_linuxMatch15.10
OR
canonicalubuntu_linuxMatch16.04lts
Node
opensuseleapMatch42.1
OR
opensuseopensuseMatch13.2

Related

fedora 6
veracode 1
debiancve 1
mageia 1
openvas 15
debian 2
nessus 13
suse 1
cvelist 1
ubuntu 2
nvd 1
osv 2
archlinux 2
prion 1
ubuntucve 1
kitploit 1
fedora
fedora
[SECURITY] Fedora 24 Update: libusbmuxd-1.0.10-5.fc24
2016-05-28 18:35:09
[SECURITY] Fedora 23 Update: libusbmuxd-1.0.10-5.fc23
2016-05-31 02:54:24
[SECURITY] Fedora 22 Update: libusbmuxd-1.0.10-5.fc22
2016-06-01 20:24:31
veracode
veracode
Exposure Of IOS Device To Attacker
2017-01-27 07:03:21
debiancve
debiancve
CVE-2016-5104
2016-06-13 14:59:08
mageia
mageia
Updated libimobiledevice packages fix CVE-2016-5104
2016-06-22 19:36:39
openvas
openvas
Ubuntu: Security Advisory (USN-3026-2)
2016-07-06 00:00:00
Mageia: Security Advisory (MGASA-2016-0229)
2022-01-28 00:00:00
Fedora Update for libimobiledevice FEDORA-2016-f10f7ee784
2016-06-08 00:00:00
debian
debian
[SECURITY] [DLA 2121-1] libimobiledevice security update
2020-02-27 21:18:56
[SECURITY] [DLA 2122-1] libusbmuxd security update
2020-02-27 22:09:44
nessus
nessus
Ubuntu 16.04 LTS : libusbmuxd vulnerability (USN-3026-2)
2016-07-06 00:00:00
Debian DLA-2122-1 : libusbmuxd security update
2020-02-28 00:00:00
RHEL 7 : libimobiledevice (Unpatched Vulnerability)
2024-05-11 00:00:00
suse
suse
Security update for libimobiledevice, usbmuxd (important)
2016-06-21 13:21:30
cvelist
cvelist
CVE-2016-5104
2016-06-13 14:00:00
ubuntu
ubuntu
libimobiledevice vulnerability
2016-07-05 00:00:00
libusbmuxd vulnerability
2016-07-05 00:00:00
nvd
nvd
CVE-2016-5104
2016-06-13 14:59:08
osv
osv
libusbmuxd - security update
2020-02-27 00:00:00
libimobiledevice - security update
2020-02-27 00:00:00
archlinux
archlinux
[ASA-201706-5] libusbmuxd: access restriction bypass
2017-06-05 00:00:00
[ASA-201701-34] libimobiledevice: access restriction bypass
2017-01-27 00:00:00
prion
prion
Design/Logic Flaw
2016-06-13 14:59:00
ubuntucve
ubuntucve
CVE-2016-5104
2016-06-13 00:00:00
kitploit
kitploit
arch-audit - An utility like pkg-audit for Arch Linux
2016-10-15 14:30:00

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

5.3 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.005 Low

EPSS

Percentile

76.8%

JSON
Related for CVE-2016-5104
fedora6veracode1debiancve1mageia1openvas15debian2nessus13suse1cvelist1ubuntu2nvd1osv2archlinux2prion1ubuntucve1kitploit1