CVE-2016-10200

high
New! CVE Severity Now Using CVSS v3

The calculated severity for CVEs has been updated to use CVSS v3 by default. CVEs that do not have a CVSS v3 score will fall back CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.

Description

Race condition in the L2TPv3 IP Encapsulation feature in the Linux kernel before 4.8.14 allows local users to gain privileges or cause a denial of service (use-after-free) by making multiple bind system calls without properly ascertaining whether a socket has the SOCK_ZAPPED status, related to net/l2tp/l2tp_ip.c and net/l2tp/l2tp_ip6.c.

References

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=32c231164b762dddefa13af5a0101032c70b50ef

http://source.android.com/security/bulletin/2017-03-01.html

http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.14

http://www.securityfocus.com/bid/101783

http://www.securitytracker.com/id/1037965

http://www.securitytracker.com/id/1037968

https://access.redhat.com/errata/RHSA-2017:1842

https://access.redhat.com/errata/RHSA-2017:2077

https://access.redhat.com/errata/RHSA-2017:2437

https://access.redhat.com/errata/RHSA-2017:2444

https://github.com/torvalds/linux/commit/32c231164b762dddefa13af5a0101032c70b50ef

Details

Source: MITRE

Published: 2017-03-07

Updated: 2018-01-05

Type: CWE-264

Risk Information

CVSS v2

Base Score: 6.9

Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C

Impact Score: 10

Exploitability Score: 3.4

Severity: MEDIUM

CVSS v3

Base Score: 7

Vector: CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Impact Score: 5.9

Exploitability Score: 1

Severity: HIGH

Vulnerable Software

Configuration 1

OR

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions up to 4.8.13 (inclusive)

Configuration 2

OR

cpe:2.3:o:google:android:*:*:*:*:*:*:*:* versions up to 7.1.1 (inclusive)

Tenable Plugins

View all (33 total)

IDNameProductFamilySeverity
124815EulerOS Virtualization 3.0.1.0 : kernel (EulerOS-SA-2019-1491)NessusHuawei Local Security Checks
critical
124798EulerOS Virtualization for ARM 64 3.0.1.0 : kernel (EulerOS-SA-2019-1474)NessusHuawei Local Security Checks
high
106469OracleVM 3.4 : Unbreakable / etc (OVMSA-2018-0015) (BlueBorne) (Meltdown) (Spectre) (Stack Clash)NessusOracleVM Local Security Checks
critical
105248OracleVM 3.4 : Unbreakable / etc (OVMSA-2017-0174) (BlueBorne) (Dirty COW) (Stack Clash)NessusOracleVM Local Security Checks
high
105247Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3659)NessusOracle Linux Local Security Checks
high
105147OracleVM 3.3 : Unbreakable / etc (OVMSA-2017-0173) (BlueBorne) (Stack Clash)NessusOracleVM Local Security Checks
high
105145Oracle Linux 6 : Unbreakable Enterprise kernel (ELSA-2017-3658)NessusOracle Linux Local Security Checks
high
105144Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3657)NessusOracle Linux Local Security Checks
high
103354SUSE SLES11 Security Update : kernel (SUSE-SU-2017:2525-1) (Stack Clash)NessusSuSE Local Security Checks
critical
103326Ubuntu 14.04 LTS : linux vulnerabilities (USN-3422-1) (BlueBorne)NessusUbuntu Local Security Checks
high
102774OracleVM 3.4 : Unbreakable / etc (OVMSA-2017-0145) (Stack Clash)NessusOracleVM Local Security Checks
critical
102773Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3609)NessusOracle Linux Local Security Checks
critical
102734CentOS 7 : kernel (CESA-2017:1842) (Stack Clash)NessusCentOS Local Security Checks
high
102645Scientific Linux Security Update : kernel on SL7.x x86_64 (20170801)NessusScientific Linux Local Security Checks
high
102625OracleVM 3.3 : Unbreakable / etc (OVMSA-2017-0144)NessusOracleVM Local Security Checks
high
102624Oracle Linux 6 : Unbreakable Enterprise kernel (ELSA-2017-3607)NessusOracle Linux Local Security Checks
high
102623Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3606)NessusOracle Linux Local Security Checks
high
102573OracleVM 3.4 : Unbreakable / etc (OVMSA-2017-0143)NessusOracleVM Local Security Checks
high
102572Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3605)NessusOracle Linux Local Security Checks
high
102511Oracle Linux 7 : kernel (ELSA-2017-1842-1) (Stack Clash)NessusOracle Linux Local Security Checks
critical
102350RHEL 6 : MRG (RHSA-2017:2444)NessusRed Hat Local Security Checks
high
102349RHEL 7 : kernel (RHSA-2017:2437)NessusRed Hat Local Security Checks
high
102281Oracle Linux 7 : kernel (ELSA-2017-1842)NessusOracle Linux Local Security Checks
high
102151RHEL 7 : kernel-rt (RHSA-2017:2077)NessusRed Hat Local Security Checks
high
102143RHEL 7 : kernel (RHSA-2017:1842) (Stack Clash)NessusRed Hat Local Security Checks
high
100320SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2017:1360-1)NessusSuSE Local Security Checks
critical
100214SUSE SLES11 Security Update : kernel (SUSE-SU-2017:1301-1)NessusSuSE Local Security Checks
high
100150SUSE SLES12 Security Update : kernel (SUSE-SU-2017:1247-1)NessusSuSE Local Security Checks
critical
100023SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2017:1183-1)NessusSuSE Local Security Checks
high
99921F5 Networks BIG-IP : Linux kernel vulnerability (K68852819)NessusF5 Networks Local Security Checks
high
99733Debian DLA-922-1 : linux security updateNessusDebian Local Security Checks
high
99157openSUSE Security Update : the Linux Kernel (openSUSE-2017-419)NessusSuSE Local Security Checks
high
99156openSUSE Security Update : the Linux Kernel (openSUSE-2017-418)NessusSuSE Local Security Checks
high