Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2016-4486
HistoryMay 23, 2016 - 12:00 a.m.

CVE-2016-4486

2016-05-2300:00:00
ubuntu.com
ubuntu.com
32

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS3

3.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS

0

Percentile

10.5%

JSON

The rtnl_fill_link_ifmap function in net/core/rtnetlink.c in the Linux
kernel before 4.5.5 does not initialize a certain data structure, which
allows local users to obtain sensitive information from kernel stack memory
by reading a Netlink message.

Bugs

Notes

Author Note
jdstrand android kernels (flo, goldfish, grouper, maguro, mako and manta) are not supported on the Ubuntu Touch 14.10 and earlier preview kernels linux-lts-saucy no longer receives official support linux-lts-quantal no longer receives official support
OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchlinux< 3.2.0-104.145UNKNOWN
ubuntu14.04noarchlinux< 3.13.0-87.133UNKNOWN
ubuntu15.10noarchlinux< 4.2.0-38.45UNKNOWN
ubuntu16.04noarchlinux< 4.4.0-24.43UNKNOWN
ubuntu12.04noarchlinux-armadaxp< 3.2.0-1667.92UNKNOWN
ubuntu12.04noarchlinux-lts-trusty< 3.13.0-88.135~precise1UNKNOWN
ubuntu14.04noarchlinux-lts-utopic< 3.16.0-73.95~14.04.1UNKNOWN
ubuntu14.04noarchlinux-lts-vivid< 3.19.0-61.69~14.04.1UNKNOWN
ubuntu14.04noarchlinux-lts-wily< 4.2.0-38.45~14.04.1UNKNOWN
ubuntu14.04noarchlinux-lts-xenial< 4.4.0-24.43~14.04.1UNKNOWN
Rows per page:
1-10 of 141

Related

debiancve 1
cvelist 1
zdt 1
redhatcve 1
prion 1
exploitpack 1
nvd 1
packetstorm 1
f5 1
exploitdb 1
cve 1
fedora 3
nessus 37
openvas 33
amazon 1
ubuntu 12
cloudfoundry 1
suse 13
debian 3
osv 3
androidsecurity 1
debiancve
debiancve
CVE-2016-4486
2016-05-23 10:59:02
cvelist
cvelist
CVE-2016-4486
2016-05-23 10:00:00
zdt
zdt
Linux Kernel 4.4 - rtnetlink Stack Memory Disclosure Exploit
2018-12-19 00:00:00
redhatcve
redhatcve
CVE-2016-4486
2016-05-05 09:48:18
prion
prion
Design/Logic Flaw
2016-05-23 10:59:00
exploitpack
exploitpack
Linux Kernel 4.4 - rtnetlink Stack Memory Disclosure
2018-12-19 00:00:00
nvd
nvd
CVE-2016-4486
2016-05-23 10:59:02
packetstorm
packetstorm
Linux Kernel 4.4 rtnetlink Stack Memory Disclosure
2018-12-19 00:00:00
f5
f5
K85332020 : Netlink message vulnerability CVE-2016-4486
2016-06-29 00:00:00
exploitdb
exploitdb
Linux Kernel 4.4 - &#039;rtnetlink&#039; Stack Memory Disclosure
2018-12-19 00:00:00
cve
cve
CVE-2016-4486
2016-05-23 10:59:02
fedora
fedora
[SECURITY] Fedora 22 Update: kernel-4.4.9-200.fc22
2016-05-16 14:56:10
[SECURITY] Fedora 24 Update: kernel-4.5.4-300.fc24
2016-05-14 23:33:19
[SECURITY] Fedora 23 Update: kernel-4.5.5-201.fc23
2016-06-02 15:04:03
nessus
nessus
Fedora 22 : kernel (2016-a159c484e4)
2016-07-14 00:00:00
Fedora 24 : kernel (2016-ef973efab7)
2016-07-14 00:00:00
Amazon Linux AMI : kernel (ALAS-2016-703)
2016-05-19 00:00:00
openvas
openvas
Fedora Update for kernel FEDORA-2016-a159c484e4
2016-06-08 00:00:00
Fedora Update for kernel FEDORA-2016-ef973efab7
2016-06-08 00:00:00
Amazon Linux: Security Advisory (ALAS-2016-703)
2016-10-26 00:00:00
amazon
amazon
Medium: kernel
2016-05-18 14:00:00
ubuntu
ubuntu
Linux kernel vulnerabilities
2016-06-10 00:00:00
Linux kernel (Raspberry Pi 2) vulnerabilities
2016-06-10 00:00:00
Linux kernel (Trusty HWE) vulnerabilities
2016-06-10 00:00:00
cloudfoundry
cloudfoundry
USN-3001-1 Linux kernel (Vivid HWE) vulnerabilities | Cloud Foundry
2016-06-15 00:00:00
suse
suse
Security update for the Linux Kernel (important)
2016-06-28 16:08:01
Security update for the Linux Kernel (important)
2016-09-12 14:11:24
Security update for the Linux Kernel (important)
2016-08-29 20:08:39
debian
debian
[SECURITY] [DLA 516-1] linux security update
2016-06-17 12:12:11
[SECURITY] [DSA 3607-1] linux security update
2016-06-28 09:56:48
[SECURITY] [DSA 3607-1] linux security update
2016-06-28 09:56:48
osv
osv
linux - security update
2016-06-17 00:00:00
linux - security update
2016-06-28 00:00:00
kernel-debug-4.8.13-1.1 on GA media
2024-06-15 00:00:00
androidsecurity
androidsecurity
Android Security Bulletin—August 2016
2016-08-01 00:00:00

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS3

3.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS

0

Percentile

10.5%

JSON
Related for UB:CVE-2016-4486
debiancve1cvelist1zdt1redhatcve1prion1exploitpack1nvd1packetstorm1f51exploitdb1cve1fedora3nessus37openvas33amazon1ubuntu12cloudfoundry1suse13debian3osv3androidsecurity1