Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveRedhatCVE-2016-8650
HistoryNov 28, 2016 - 3:59 a.m.

CVE-2016-8650

2016-11-2803:59:09
CWE-20
CWE-399
redhat
web.nvd.nist.gov
164
cve-2016-8650
linux kernel
denial of service
stack memory corruption
add_key system call
rsa key
nvd

CVSS2

4.9

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

5.8

Confidence

High

EPSS

0

Percentile

5.1%

JSON

The mpi_powm function in lib/mpi/mpi-pow.c in the Linux kernel through 4.8.11 does not ensure that memory is allocated for limb data, which allows local users to cause a denial of service (stack memory corruption and panic) via an add_key system call for an RSA key with a zero exponent.

Affected configurations

Nvd
Node
linuxlinux_kernelRange≤4.8.11
VendorProductVersionCPE
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Related

fedora 3
nessus 30
nvd 1
openvas 14
redhatcve 1
debiancve 1
ubuntucve 1
prion 1
cvelist 1
veracode 1
f5 1
oraclelinux 5
redhat 4
centos 2
mageia 3
ibm 3
amazon 1
virtuozzo 2
ubuntu 2
androidsecurity 1
fedora
fedora
[SECURITY] Fedora 25 Update: kernel-4.8.11-300.fc25
2016-12-05 21:48:11
[SECURITY] Fedora 24 Update: kernel-4.8.11-200.fc24
2016-12-06 10:30:09
[SECURITY] Fedora 23 Update: kernel-4.8.11-100.fc23
2016-12-06 02:25:01
nessus
nessus
Fedora 25 : kernel (2016-6afdd2b61d)
2016-12-06 00:00:00
Fedora 24 : kernel (2016-b18410c59c)
2016-12-07 00:00:00
Fedora 23 : kernel (2016-a820774fc2)
2016-12-07 00:00:00
nvd
nvd
CVE-2016-8650
2016-11-28 03:59:09
openvas
openvas
Fedora Update for kernel FEDORA-2016-6afdd2b61d
2016-12-07 00:00:00
Fedora Update for kernel FEDORA-2016-a820774fc2
2016-12-07 00:00:00
Fedora Update for kernel FEDORA-2016-b18410c59c
2016-12-07 00:00:00
redhatcve
redhatcve
CVE-2016-8650
2019-10-10 04:50:43
debiancve
debiancve
CVE-2016-8650
2016-11-28 03:59:09
ubuntucve
ubuntucve
CVE-2016-8650
2016-11-27 00:00:00
prion
prion
Memory corruption
2016-11-28 03:59:00
cvelist
cvelist
CVE-2016-8650
2016-11-28 03:01:00
veracode
veracode
Denial Of Service (DoS)
2019-01-15 09:16:54
f5
f5
K46394694 : Linux kernel vulnerability CVE-2016-8650
2018-07-31 00:00:00
oraclelinux
oraclelinux
Unbreakable Enterprise kernel security update
2016-12-09 00:00:00
Unbreakable Enterprise kernel security update
2016-12-07 00:00:00
kernel security, bug fix, and enhancement update
2017-04-13 00:00:00
redhat
redhat
(RHSA-2017:0933) Important: kernel security, bug fix, and enhancement update
2017-04-12 10:39:45
(RHSA-2017:0931) Important: kernel-rt security and bug fix update
2017-04-12 10:29:33
(RHSA-2017:0932) Important: kernel-rt security and bug fix update
2017-04-12 10:32:45
centos
centos
kernel, perf, python security update
2017-04-13 11:00:48
kernel, perf, python security update
2018-06-21 11:55:42
mageia
mageia
Updated kernel packages fixes security vulnerabilities
2016-12-08 10:33:24
Updated kernel-linus packages fix security vulnerabilities
2017-01-04 01:05:03
Updated kernel-tmb packages fix security vulnerabilities
2017-01-04 01:05:03
ibm
ibm
Security Bulletin: Vulnerabilities in the Linux Kernel affect PowerKVM
2018-06-18 01:34:53
Security Bulletin: IBM QRadar Network Security is affected by vulnerabilities in Linux kernel
2018-06-16 22:02:59
Security Bulletin: Vulnerabilities in the Linux kernel affect PowerKVM
2018-06-18 01:38:07
amazon
amazon
Medium: kernel
2017-01-04 17:00:00
virtuozzo
virtuozzo
Important kernel security update: CVE-2018-10675 and other issues; new kernel 2.6.32-042stab131.1 for Virtuozzo Containers for Linux 4.7, Server Bare Metal 5.0
2018-06-25 00:00:00
Important kernel security update: CVE-2018-10675 and other issues; new kernel 2.6.32-042stab131.1; Virtuozzo 6.0 Update 12 Hotfix 28 (6.0.12-3709)
2018-06-25 00:00:00
ubuntu
ubuntu
Linux kernel (Trusty HWE) vulnerabilities
2017-09-18 00:00:00
Linux kernel vulnerabilities
2017-09-18 00:00:00
androidsecurity
androidsecurity
Android Security Bulletin—March 2017
2017-03-06 00:00:00

CVSS2

4.9

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

5.8

Confidence

High

EPSS

0

Percentile

5.1%

JSON
Related for CVE-2016-8650
fedora3nessus30nvd1openvas14redhatcve1debiancve1ubuntucve1prion1cvelist1veracode1f51oraclelinux5redhat4centos2mageia3ibm3amazon1virtuozzo2ubuntu2androidsecurity1