Lucene search
Huawei TechnologiesHUAWEI-SA-20161207-01-DIRTYCOWHistoryDec 07, 2016 - 12:00 a.m.
Security Advisory - Dirty COW Vulnerability in Huawei Products
2016-12-0700:00:00
Huawei Technologies
www.huawei.com
87
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.879 High
EPSS
Percentile
98.7%
In the morning of October 21th, 2016, a security researcher Phil Oester disclosed a local privilege escalation vulnerability in Linux kernel.
A race condition was found in the way the Linux kernel’s memory subsystem handled the copy-on-write (COW) breakage of private read-only memory mappings. An unprivileged local user could exploit this vulnerability to gain write access to otherwise read-only memory mappings and thus obtain the highest privileges on the system. (Vulnerability ID: HWPSIRT-2016-10050)
This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2016-5195.
Huawei has released software updates to fix this vulnerability. This advisory is available at the following link:
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161207-01-dirtycow-en
Affected configurations
Node
huaweirh2288_v3MatchV100R003C00
ORhuaweihuawei_firmwareMatchV100R001C00
ORhuaweihuawei_firmwareMatchV100R001C00SPC101
ORhuaweihuawei_firmwareMatchV100R001C00SPC200
ORhuaweiac6605MatchV200R006C00
ORhuaweiagile_controller-campusMatchV100R002C00
ORhuaweiagile_controller-campusMatchV100R002C10
ORhuaweiagile_controller-campusMatchV100R002C10SPC400
ORhuaweiagile_controller-campusMatchV100R002C10SPC403
ORhuaweihuawei_firmwareMatchV100R001C10B290
ORhuaweihuawei_firmwareMatchV100R001C10B680
ORhuaweihuawei_firmwareMatchV100R001C20B110
ORhuaweihuawei_firmwareMatchV100R001C30
ORhuaweihuawei_firmwareMatchV100R001C50
ORhuaweitecal_bh620_v2MatchV100R002C00
ORhuaweitecal_bh621_v2MatchV100R002C00
ORhuaweitecal_bh622_v2MatchV100R002C00
ORhuaweitecal_bh640_v2MatchV100R002C00
ORhuaweihuawei_firmwareMatchV800R200C50B200
ORhuaweihuawei_firmwareMatchV800R200C55B200
ORhuaweihuawei_firmwareMatchV700R110C30
ORhuaweihuawei_firmwareMatchV700R110C31
ORhuaweihuawei_firmwareMatchV700R200C00
ORhuaweihuawei_firmwareMatchV700R220C30
ORhuaweihuawei_firmwareMatchV700R500C30
ORhuaweihuawei_firmwareMatchV700R500C31
ORhuaweich121_v3MatchV100R001C00
ORhuaweich140_v3MatchV100R001C00
ORhuaweich220_v3MatchV100R001C00
ORhuaweich222_v3MatchV100R001C00
ORhuaweirh2288_v3MatchV100R001C00
ORhuaweich226_v3_serverMatchV100R001C00
ORhuaweihuawei_firmwareMatchV200R003C10
ORhuaweihuawei_firmwareMatchV100R001C10
ORhuaweihuawei_firmwareMatchSysToolV200R016C10SPC100
ORhuaweihuawei_firmwareMatchSysToolV200R016C10SPC100B021
ORhuaweihuawei_firmwareMatchV200R016C10SPC600
ORhuaweihuawei_firmwareMatchV100R001C10
ORhuaweihuawei_firmwareMatchE5573s-320TCPU-V200R001B180D11SP00C00
ORhuaweihuawei_firmwareMatchE5878s-32TCPU-V200R001B280D01SP05C00
ORhuaweie6000MatchV100R001C00
ORhuaweipublic_cloud_solutionMatchV100R001C60
ORhuaweifusioncomputeMatchV100R003C10SPC600
ORhuaweifusioncomputeMatchV100R005C00
ORhuaweifusioncomputeMatchV100R005C10
ORhuaweifusioncomputeMatchV100R005C10U1_B1075917
ORhuaweifusioncubeMatchV100R002C60RC1
ORhuaweifusionmanagerMatchV100R005C00
ORhuaweifusionmanagerMatchV100R005C10
ORhuaweifusionmanagerMatchV100R003C00
ORhuaweifusionmanagerMatchV100R003C10
ORhuaweifusionmanagerMatchV100R005C00
ORhuaweifusionmanagerMatchV100R005C00SPC100
ORhuaweifusionmanagerMatchV100R005C00SPC200
ORhuaweifusionmanagerMatchV100R005C00SPC300
ORhuaweifusionmanagerMatchV100R005C10
ORhuaweifusionmanagerMatchV100R005C10SPC300
ORhuaweifusionmanagerMatchV100R005C10SPC500
ORhuaweifusionmanagerMatchV100R005C10SPC700
ORhuaweifusionmanagerMatchV100R005C10SPC703
ORhuaweifusionmanagerMatchV100R005C10SPC720T
ORhuaweifusionmanagerMatchV100R005C10U1_B1075133
ORhuaweifusionmanagerMatchV100R005C10U2
ORhuaweifusionsphere_openstackMatchV100R005C00
ORhuaweifusionsphere_openstackMatchV100R005C10
ORhuaweifusionsphere_openstackMatchV100R005C10SPC500
ORhuaweifusionsphere_openstackMatchV100R005C10SPC700
ORhuaweifusionsphere_openstackMatchV100R005C10U20
ORhuaweifusionsphere_openstackMatchV100R005C10U30
ORhuaweifusionsphere_openstackMatchV100R006C00
ORhuaweifusionsphere_openstackMatchV100R006C00RC1
ORhuaweifusionstorageMatchV100R003C00
ORhuaweifusionstorageMatchV100R003C02
ORhuaweifusionstorageMatchV100R003C30
ORhuaweifusionstorageMatchV100R002C00
ORhuaweifusionstorageMatchV100R002C01
ORhuaweihuawei_firmwareMatchHiDPTAndroidV200R001C00
ORhuaweihuawei_firmwareMatchV300R001C00
ORhuaweihuawei_firmwareMatchHiSTBAndroidV600R003C00SPC010
ORsaphanaMatchV100R001C00
ORhuaweihuawei_firmwareMatchV100R001C10
ORhuaweihuawei_firmwareMatchV100R001C10
ORhuaweihuawei_firmwareMatchV100R001C00
ORhuaweinem-l21MatchKII-L21C02B131CUSTC02D002
ORhuaweinem-l21MatchKII-L21C10B130CUSTC10D003
ORhuaweinem-l21MatchKII-L21C10B140CUSTC10D004
ORhuaweinem-l21MatchKII-L21C185B130CUSTC185D002
ORhuaweinem-l21MatchKII-L21C185B140CUSTC185D004
ORhuaweinem-l21MatchKII-L21C185B310CUSTC185D004
ORhuaweinem-l21MatchKII-L21C464B130
ORhuaweinem-l21MatchKII-L21C629B130CUSTC629D004
ORhuaweinem-l21MatchKII-L21C636B130CUSTC636D002
ORhuaweinem-l21MatchKII-L21C636B140CUSTC636D004
ORhuaweinem-l21MatchKII-L21C636B150CUSTC636D005
ORhuaweinem-l21MatchKII-L21C636B310CUSTC636D001
ORhuaweinem-l21MatchKII-L21C636B320CUSTC636D001
ORhuaweinem-l21MatchKII-L21C900B122
ORhuaweinem-l21MatchKII-L21C96B130
ORhuaweinem-l21MatchOTA-KII-L21C02B131CUSTC02D002
ORhuaweinem-l21MatchOTA-KII-L21C185B140CUSTC185D004
ORhuaweinem-l21MatchOTA-KII-L21C185B310CUSTC185D004
ORhuaweinem-l21MatchOTA-KII-L21C636B140CUSTC636D004
ORhuaweinem-l21MatchOTA-KII-L21C636B310CUSTC636D001
ORhuaweinem-l21MatchOTA-KII-L21C636B320CUSTC636D001
ORhuaweihuawei_firmwareMatchV100R001C00SPC200
ORhuaweilogcenterMatchV100R001C10
ORhuaweiota-bisheng_firmwareMatchKII-L21C636B150CUSTC636D005
ORhuaweioceanstor_18500MatchV100R002C00
ORhuaweioceanstor_18500MatchV100R002C00LHWS01_P385795
ORhuaweioceanstor_18500MatchV100R002C00SPC200
ORhuaweioceanstor_18500MatchV200R001C00
ORhuaweioceanstor_18500MatchV200R001C00SPC200
ORhuaweioceanstor_cseMatchV100R001C01SPC103
ORhuaweioceanstor_cseMatchV100R001C01SPC106
ORhuaweioceanstor_cseMatchV100R001C01SPC109
ORhuaweioceanstor_cseMatchV100R001C01SPC112
ORhuaweioceanstor_cseMatchV100R002C00LSFM01CP0001
ORhuaweioceanstor_cseMatchV100R002C00LSFM01SPC101
ORhuaweioceanstor_cseMatchV100R002C00LSFM01SPC102
ORhuaweioceanstor_cseMatchV100R002C00LSFM01SPC106
ORhuaweioceanstor_18500MatchV100R002C00
ORhuaweioceanstor_18500MatchV100R003C00
ORhuaweioceanstor_hvs85tMatchV100R001C00
ORhuaweioceanstor_hvs85tMatchV100R001C10
ORhuaweioceanstor_hvs85tMatchV100R001C30
ORhuaweioceanstor_18500MatchV200R001C09
ORhuaweioceanstor_18500MatchV200R001C91
ORhuaweioceanstor_18500MatchV200R001C91SPC900
ORhuaweioceanstor_18500MatchV100R003C10
ORhuaweioceanstor_replicationdirectorMatchV200R001C00
ORhuaweipublic_cloud_solutionMatchV100R005C00
ORhuaweipublic_cloud_solutionMatchV1R5C00RC2
ORhuaweitecal_rh1288_v2MatchV100R002C00
ORhuaweirh1288_v3MatchV100R003C00
ORhuaweirh1288a_v2MatchV100R002C00
ORhuaweitecal_rh2285_v2MatchV100R002C00
ORhuaweitecal_rh2285h_v2MatchV100R002C00
ORhuaweitecal_rh2288_v2MatchV100R002C00
ORhuaweirh2288_v3MatchV100R003C00
ORhuaweirh2288a_v2MatchV100R002C00
ORhuaweirh2288a_v2MatchV100R002C00
ORhuaweitecal_rh2288h_v2MatchV100R002C00
ORhuaweirh2288h_v3MatchV100R003C00
ORhuaweitecal_rh2485_v2MatchV100R002C00
ORhuaweirh5885_v3_serverMatchV100R003C01
ORhuaweirh5885_v3_serverMatchV100R003C10
ORhuaweitecal_rh5885h_v3MatchV100R003C00
ORhuaweitecal_rh5885h_v3MatchV100R003C10
ORhuaweirh8100_v3MatchV100R003C00
ORhuaweihuawei_firmwareMatchV300R002C10
ORhuaweihuawei_firmwareMatchV300R002C20
ORhuaweihuawei_firmwareMatchV300R003C00
ORhuaweihuawei_firmwareMatchV300R003C10
ORhuaweihuawei_firmwareMatchV300R003C91
ORhuaweihuawei_firmwareMatchV300R003C93
ORhuaweihuawei_firmwareMatchV500R001C00
ORhuaweihuawei_firmwareMatchV500R001C10
ORhuaweihuawei_firmwareMatchV500R001C20
ORhuaweihuawei_firmwareMatchV500R001C20
ORhuaweihuawei_firmwareMatchV500R001C30
ORhuaweihuawei_firmwareMatchV500R001C50
ORhuaweihuawei_firmwareMatchV500R001C60
ORhuaweihuawei_firmwareMatchV500R002C00
ORhuaweihuawei_firmwareMatchV500R002C10
ORhuaweihuawei_firmwareMatchV500R002C20
ORhuaweihuawei_firmwareMatchV500R002C30
ORhuaweihuawei_firmwareMatchV500R002C50
ORhuaweihuawei_firmwareMatchV500R001C50
ORhuaweihuawei_firmwareMatchV500R001C60
ORhuaweihuawei_firmwareMatchV500R002C00
ORhuaweihuawei_firmwareMatchV500R002C10
ORhuaweihuawei_firmwareMatchV500R002C20
ORhuaweihuawei_firmwareMatchV500R002C30
ORhuaweihuawei_firmwareMatchV100R001C00
ORhuaweihuawei_firmwareMatchV100R001C10
ORhuaweihuawei_firmwareMatchV100R001C34
ORhuaweihuawei_firmwareMatchV100R002C02
ORhuaweihuawei_firmwareMatchV200R001C01
ORhuaweihuawei_firmwareMatchV200R001C31
ORhuaweihuawei_firmwareMatchV100R001C00
ORhuaweihuawei_firmwareMatchV100R001C08
ORhuaweihuawei_firmwareMatchV100R001C10
ORhuaweihuawei_firmwareMatchV100R001C37
ORhuaweihuawei_firmwareMatchV100R001C39
ORhuaweihuawei_firmwareMatchV100R002C00
ORhuaweihuawei_firmwareMatchV100R002C04
ORhuaweihuawei_firmwareMatchV100R002C11
ORhuaweihuawei_firmwareMatchV100R002C15
ORhuaweihuawei_firmwareMatchV100R002C34
ORhuaweihuawei_firmwareMatchV100R002C41
ORhuaweihuawei_firmwareMatchV100R003C00
ORhuaweihuawei_firmwareMatchV100R003C01
ORhuaweihuawei_firmwareMatchV100R003C03
ORhuaweihuawei_firmwareMatchV300R001C90
ORhuaweihuawei_firmwareMatchV300R002C00
ORhuaweihuawei_firmwareMatchV100R002C02
ORhuaweihuawei_firmwareMatchV100R001C00
ORhuaweihuawei_firmwareMatchV100R001C10
ORhuaweihuawei_firmwareMatchV100R001C20
ORhuaweihuawei_firmwareMatchV100R002C00
ORhuaweix6800_v3_serverMatchV100R003C00
ORhuaweihuawei_firmwareMatchV100R001C00
ORhuaweihuawei_firmwareMatchV100R001C01LSHU01
ORhuaweihuawei_firmwareMatchV200R003C10
ORhuaweihuawei_firmwareMatchV200R003C20
ORhuaweihuawei_firmwareMatchV100R003C00
ORhuaweiesightMatchV300R003C20
ORhuaweiesightMatchV300R005C00SPC200
ORhuaweiesightMatchV300R006C00
ORhuaweiesightMatchV300R007C00
ORhuaweiespace_8950MatchV200R003C00
ORhuaweiespace_desktopMatchV100R001C21
ORhuaweiespace_desktopMatchV200R001C01
ORhuaweiespace_desktopMatchV200R001C02
ORhuaweiespace_desktopMatchV100R001C01
ORhuaweiespace_desktopMatchV100R002C00
ORhuaweiespace_desktopMatchV100R002C10
ORhuaweiespace_desktopMatchV100R002C20
ORhuaweihuawei_firmwareMatchiBattery_V276
ORhuaweihuawei_firmwareMatchiBattery_V281
ORhuaweihuawei_firmwareMatchiBattery_V285
ORhuaweihuawei_firmwareMatchiBattery_V286
ORhuaweihuawei_firmwareMatchiBattery_V289
ORhuaweihuawei_firmwareMatchV200R001C21
ORhuaweihuawei_firmwareMatchV100R001C10
ORhuaweihuawei_firmwareMatchV100R001C10SPC100
ORhuaweihuawei_firmwareMatchECC500
ORhuaweihuawei_firmwareMatchV600R002C00SPC200T
ORhuaweihuawei_firmwareMatchV600R002C00SPC300
ORhuaweihuawei_firmwareMatchV600R002C00SPC300T
Related
nessus
nessus
oraclelinux
oraclelinux
Unbreakable Enterprise kernel security update
2016-10-21 00:00:00
kernel security update
2016-10-24 00:00:00
Unbreakable Enterprise kernel security update
2016-10-21 00:00:00
archlinux
archlinux
[ASA-201610-14] linux: privilege escalation
2016-10-22 00:00:00
[ASA-201610-11] linux-lts: privilege escalation
2016-10-21 00:00:00
[ASA-201610-16] linux-grsec: privilege escalation
2016-10-24 00:00:00
saint
saint
Linux Dirty COW Local File Overwrite
2016-10-27 00:00:00
Linux Dirty COW Local File Overwrite
2016-10-27 00:00:00
Linux Dirty COW Local File Overwrite
2016-10-27 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-3106-2)
2016-10-21 00:00:00
Amazon Linux: Security Advisory (ALAS-2016-757)
2016-10-26 00:00:00
Ubuntu: Security Advisory (USN-3105-1)
2016-10-21 00:00:00
centos
centos
kernel, perf, python security update
2016-10-25 11:17:10
kernel, perf, python security update
2016-10-26 07:33:13
kernel security update
2016-10-28 13:34:09
seebug
seebug
Linux kernel 2.6.22 < 3.9 elevation of privilege vulnerability
(Dirty COW)
2016-10-22 00:00:00
"Huge Dirty COW" (CVE-2017–1000405)
2017-11-30 00:00:00
zdt
zdt
Linux Kernel 2.6.22 < 3.9 - Dirty COW PTRACE_POKEDATA Race Condition Privilege Escalation (/etc/p
2016-11-29 00:00:00
DirtyCow Linux Kernel Race Condition Exploit
2016-10-22 00:00:00
DirtyCow Local Root Proof Of Concept Exploit
2016-10-22 00:00:00
ubuntu
ubuntu
Linux kernel (Qualcomm Snapdragon) vulnerability
2016-10-20 00:00:00
Linux kernel vulnerability
2016-10-20 00:00:00
Linux kernel (OMAP4) vulnerability
2016-10-20 00:00:00
fedora
fedora
[SECURITY] Fedora 24 Update: kernel-4.7.9-200.fc24
2016-10-22 17:20:39
[SECURITY] Fedora 25 Update: kernel-4.8.3-300.fc25
2016-10-22 12:53:27
[SECURITY] Fedora 23 Update: kernel-4.7.9-100.fc23
2016-10-23 22:49:20
ubuntucve
ubuntucve
CVE-2016-5195
2016-10-19 00:00:00
ibm
ibm
Security Bulletin: Vulnerability in Linux Kernel affects ProtecTIER: Dirty COW vulnerability (CVE-2016-5195)
2022-02-16 22:09:18
Security Bulletin: IBM Security Access Manager appliances may be affected by a kernel vulnerability known as the Dirty COW bug (CVE-2016-5195)
2018-06-16 21:50:05
Security Bulletin: Dirty COW Vulnerability (CVE-2016-5195)
2018-12-08 04:55:34
veracode
veracode
Arbitrary Code Execution
2019-01-15 09:14:05
suse
suse
Security update for the Linux Kernel (important)
2016-10-21 19:14:25
Security update for the Linux Kernel (important)
2016-10-21 21:08:21
Security update for the Linux Kernel (important)
2016-10-24 17:08:24
redhat
redhat
(RHSA-2016:2098) Important: kernel security update
2016-10-24 12:01:05
(RHSA-2016:2126) Important: kernel security update
2016-10-31 00:00:00
(RHSA-2016:2132) Important: kernel security and bug fix update
2016-11-01 10:16:02
thn
thn
Dirty COW — Critical Linux Kernel Flaw Being Exploited in the Wild
2016-10-20 23:02:00
'Exodus' Surveillance Malware Found Targeting Apple iOS Users
2019-04-09 07:19:00
paloalto
paloalto
Kernel Vulnerability
2017-02-21 19:30:00
securelist
securelist
Mobile malware evolution 2019
2020-02-25 10:00:43
APT trends report Q1 2019
2019-04-30 10:00:31
android
android
CVE-2016-5195
2016-11-01 00:00:00
dirtyc0w
2016-10-13 00:00:00
chrome
chrome
Stable Channel Update for Chrome OS
2016-10-26 00:00:00
cvelist
cvelist
CVE-2016-5195
2016-11-10 21:00:00
debiancve
debiancve
CVE-2016-5195
2016-11-10 21:59:00
f5
f5
K10558632 : Linux privilege-escalation vulnerability CVE-2016-5195
2016-10-21 00:00:00
cve
cve
CVE-2016-5195
2016-11-10 21:59:00
CVE-2016-3919
2016-11-25 18:59:00
packetstorm
packetstorm
Linux Kernel Dirty COW PTRACE_POKEDATA Privilege Escalation
2016-11-28 00:00:00
Linux Kernel Dirty COW PTRACE_POKEDATA Privilege Escalation
2016-11-25 00:00:00
canvas
canvas
Immunity Canvas: LINUX_FOLL_WRITE_COW
2016-11-10 21:59:00
cisa
cisa
Linux Kernel Vulnerability
2016-10-21 00:00:00
vmware
vmware
amazon
amazon
Critical: kernel
2016-10-20 04:11:00
fortinet
fortinet
Linux Kernel Dirty Cow Vulnerability
2016-11-09 00:00:00
cisa_kev
cisa_kev
Linux Kernel Race Condition Vulnerability
2022-03-03 00:00:00
prion
prion
Race condition
2016-11-10 21:59:00
Design/Logic Flaw
2016-11-25 18:59:00
cert
cert
myhack58
myhack58
slackware
slackware
[slackware-security] kernel
2016-11-01 03:40:05
threatpost
threatpost
Serious Dirty Cow Linux Vulnerability Under Attack
2016-10-21 11:21:36
Dirty Cow Vulnerability Patched in Android Security Bulletin
2016-12-05 15:32:51
Flaw Found In Dirty COW Patch
2017-12-01 11:43:06
attackerkb
attackerkb
CVE-2016-5195
2016-11-10 00:00:00
cisco
cisco
Vulnerability in Linux Kernel Affecting Cisco Products: October 2016
2016-10-26 15:00:00
arista
arista
Security Advisory 0026
2016-10-21 00:00:00
altlinux
altlinux
nvd
nvd
CVE-2016-5195
2016-11-10 21:59:00
CVE-2016-3919
2016-11-25 18:59:00
redhatcve
redhatcve
CVE-2017-1000405
2017-11-30 07:49:34
malwarebytes
malwarebytes
Linux “Dirty Pipe” vulnerability gives unprivileged users root access
2022-03-11 14:38:30
kitploit
kitploit
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.879 High
EPSS
Percentile
98.7%
Related for HUAWEI-SA-20161207-01-DIRTYCOW