CVE-2016-9957
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
49.7%
Stack-based buffer overflow in game-music-emu before 0.6.1.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| opensuse | leap | 42.2 | cpe:2.3:o:opensuse:leap:42.2:*:*:*:*:*:*:* |
| opensuse | opensuse | 12.1 | cpe:2.3:o:opensuse:opensuse:12.1:*:*:*:*:*:*:* |
| opensuse_project | leap | 42.1 | cpe:2.3:o:opensuse_project:leap:42.1:*:*:*:*:*:*:* |
| suse | linux_enterprise | 12.0 | cpe:2.3:o:suse:linux_enterprise:12.0:*:*:*:*:*:*:* |
| suse | linux_enterprise_desktop | 12 | cpe:2.3:o:suse:linux_enterprise_desktop:12:*:*:*:*:*:*:* |
| suse | linux_enterprise_software_development_kit | 12 | cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:*:*:*:*:*:*:* |
| suse | linux_enterprise_workstation_extension | 12 | cpe:2.3:o:suse:linux_enterprise_workstation_extension:12:*:*:*:*:*:*:* |
| suse | suse_linux_enterprise_server | 12 | cpe:2.3:o:suse:suse_linux_enterprise_server:12:*:*:*:*:*:*:* |
| game-music-emu_project | game-music-emu | * | cpe:2.3:a:game-music-emu_project:game-music-emu:*:*:*:*:*:*:*:* |
References
lists.opensuse.org/opensuse-security-announce/2016-12/msg00090.html
lists.opensuse.org/opensuse-security-announce/2017-01/msg00005.html
www.openwall.com/lists/oss-security/2016/12/15/11
www.securityfocus.com/bid/95305
bitbucket.org/mpyne/game-music-emu/wiki/Home
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6LKMKVYS7AVB2EXC463FUYN6C6FABHME/
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F7Z2OVERYM6NW3FGVGTJUNSL5ZNFSH2S/
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GGHAQI5Q2XDSPGRRKPJJM3A73VWAFSFL/
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QHFKIFSFIDXOKFUKAH2MBNXDTY6DYBF6/
scarybeastsecurity.blogspot.in/2016/12/redux-compromising-linux-using-snes.html
security.gentoo.org/glsa/201707-02
Related
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
49.7%