Lucene search

K
ubuntucveUbuntu.comUB:CVE-2016-1583
HistoryJun 08, 2016 - 12:00 a.m.

CVE-2016-1583

2016-06-0800:00:00
ubuntu.com
ubuntu.com
19

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

18.4%

The ecryptfs_privileged_open function in fs/ecryptfs/kthread.c in the Linux
kernel before 4.6.3 allows local users to gain privileges or cause a denial
of service (stack memory consumption) via vectors involving crafted mmap
calls for /proc pathnames, leading to recursive pagefault handling.

Bugs

Notes

Author Note
jdstrand android kernels (flo, goldfish, grouper, maguro, mako and manta) are not supported on the Ubuntu Touch 14.10 and earlier preview kernels linux-lts-saucy no longer receives official support linux-lts-quantal no longer receives official support
OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchlinux<Β 3.2.0-104.145UNKNOWN
ubuntu14.04noarchlinux<Β 3.13.0-88.135UNKNOWN
ubuntu15.10noarchlinux<Β 4.2.0-38.45UNKNOWN
ubuntu16.04noarchlinux<Β 4.4.0-24.43UNKNOWN
ubuntu12.04noarchlinux-armadaxp<Β 3.2.0-1667.92UNKNOWN
ubuntu12.04noarchlinux-lts-trusty<Β 3.13.0-88.135~precise1UNKNOWN
ubuntu14.04noarchlinux-lts-utopic<Β 3.16.0-73.95~14.04.1UNKNOWN
ubuntu14.04noarchlinux-lts-vivid<Β 3.19.0-61.69~14.04.1UNKNOWN
ubuntu14.04noarchlinux-lts-wily<Β 4.2.0-38.45~14.04.1UNKNOWN
ubuntu14.04noarchlinux-lts-xenial<Β 4.4.0-24.43~14.04.1UNKNOWN
Rows per page:
1-10 of 141

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

18.4%