CVE-2016-7097

2016-10-1600:00:00

ubuntu.com

CVSS2

3.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:P/A:N

CVSS3

4.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

EPSS

Percentile

10.1%

JSON

The filesystem implementation in the Linux kernel through 4.8.2 preserves
the setgid bit during a setxattr call, which allows local users to gain
group privileges by leveraging the existence of a setgid program with
restrictions on execute permissions.

Notes

Author	Note
jdstrand	android kernels (flo, goldfish, grouper, maguro, mako and manta) are not supported on the Ubuntu Touch 14.10 and earlier preview kernels linux-lts-saucy no longer receives official support linux-lts-quantal no longer receives official support

OSVersionArchitecturePackageVersionFilename
ubuntu14.04noarchlinux< 3.13.0-132.181UNKNOWN
ubuntu16.04noarchlinux< 4.4.0-51.72UNKNOWN
ubuntu16.10noarchlinux< 4.8.0-28.30UNKNOWN
ubuntu14.04noarchlinux-lts-xenial< 4.4.0-51.72~14.04.1UNKNOWN
ubuntu16.04noarchlinux-raspi2< 4.4.0-1038.45UNKNOWN
ubuntu16.10noarchlinux-raspi2< 4.8.0-1021.24UNKNOWN
ubuntu16.04noarchlinux-snapdragon< 4.4.0-1042.46UNKNOWN
ubuntu16.10noarchlinux-snapdragon< 4.4.0-1046.50UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	14.04	noarch	linux	< 3.13.0-132.181	UNKNOWN
ubuntu	16.04	noarch	linux	< 4.4.0-51.72	UNKNOWN
ubuntu	16.10	noarch	linux	< 4.8.0-28.30	UNKNOWN
ubuntu	14.04	noarch	linux-lts-xenial	< 4.4.0-51.72~14.04.1	UNKNOWN
ubuntu	16.04	noarch	linux-raspi2	< 4.4.0-1038.45	UNKNOWN
ubuntu	16.10	noarch	linux-raspi2	< 4.8.0-1021.24	UNKNOWN
ubuntu	16.04	noarch	linux-snapdragon	< 4.4.0-1042.46	UNKNOWN
ubuntu	16.10	noarch	linux-snapdragon	< 4.4.0-1046.50	UNKNOWN