Lucene search

K
ubuntucveUbuntu.comUB:CVE-2016-5829
HistoryJun 27, 2016 - 12:00 a.m.

CVE-2016-5829

2016-06-2700:00:00
ubuntu.com
ubuntu.com
29

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0

Percentile

10.1%

Multiple heap-based buffer overflows in the hiddev_ioctl_usage function in
drivers/hid/usbhid/hiddev.c in the Linux kernel through 4.6.3 allow local
users to cause a denial of service or possibly have unspecified other
impact via a crafted (1) HIDIOCGUSAGES or (2) HIDIOCSUSAGES ioctl call.

Notes

Author Note
jdstrand android kernels (flo, goldfish, grouper, maguro, mako and manta) are not supported on the Ubuntu Touch 14.10 and earlier preview kernels linux-lts-saucy no longer receives official support linux-lts-quantal no longer receives official support
OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchlinux< 3.2.0-109.150UNKNOWN
ubuntu14.04noarchlinux< 3.13.0-95.142UNKNOWN
ubuntu16.04noarchlinux< 4.4.0-36.55UNKNOWN
ubuntu12.04noarchlinux-armadaxp< 3.2.0-1672.98UNKNOWN
ubuntu12.04noarchlinux-lts-trusty< 3.13.0-95.142~precise1UNKNOWN
ubuntu14.04noarchlinux-lts-vivid< 3.19.0-68.76~14.04.1UNKNOWN
ubuntu14.04noarchlinux-lts-xenial< 4.4.0-36.55~14.04.1UNKNOWN
ubuntu16.04noarchlinux-raspi2< 4.4.0-1021.27UNKNOWN
ubuntu16.04noarchlinux-snapdragon< 4.4.0-1024.27UNKNOWN
ubuntu12.04noarchlinux-ti-omap4< 3.2.0-1487.114UNKNOWN

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0

Percentile

10.1%