CVE-2016-8633

MEDIUM

Description

drivers/firewire/net.c in the Linux kernel before 4.8.7, in certain unusual hardware configurations, allows remote attackers to execute arbitrary code via crafted fragmented packets.

References

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=667121ace9dbafb368618dbabcf07901c962ddac

http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.7

http://www.openwall.com/lists/oss-security/2016/11/06/1

http://www.securityfocus.com/bid/94149

https://access.redhat.com/errata/RHSA-2018:0676

https://access.redhat.com/errata/RHSA-2018:1062

https://access.redhat.com/errata/RHSA-2019:1170

https://access.redhat.com/errata/RHSA-2019:1190

https://bugzilla.redhat.com/show_bug.cgi?id=1391490

https://eyalitkin.wordpress.com/2016/11/06/cve-publication-cve-2016-8633/

https://github.com/torvalds/linux/commit/667121ace9dbafb368618dbabcf07901c962ddac

Details

Source: MITRE

Published: 2016-11-28

Updated: 2019-05-14

Type: CWE-119

Risk Information

CVSS v2.0

Base Score: 6.2

Vector: AV:L/AC:H/Au:N/C:C/I:C/A:C

Impact Score: 10

Exploitability Score: 1.9

Severity: MEDIUM

CVSS v3.0

Base Score: 6.8

Vector: CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Impact Score: 5.9

Exploitability Score: 0.9

Severity: MEDIUM

Tenable Plugins

View all (34 total)

ID	Name	Product	Family	Severity
127233	NewStart CGSL CORE 5.04 / MAIN 5.04 : kernel-rt Multiple Vulnerabilities (NS-SA-2019-0049)	Nessus	NewStart CGSL Local Security Checks	high
127222	NewStart CGSL CORE 5.04 / MAIN 5.04 : kernel Multiple Vulnerabilities (NS-SA-2019-0044)	Nessus	NewStart CGSL Local Security Checks	high
125192	RHEL 6 : MRG (RHSA-2019:1190) (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout)	Nessus	Red Hat Local Security Checks	high
125039	RHEL 7 : kernel (RHSA-2019:1170) (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout)	Nessus	Red Hat Local Security Checks	high
124970	EulerOS Virtualization for ARM 64 3.0.1.0 : kernel (EulerOS-SA-2019-1517)	Nessus	Huawei Local Security Checks	high
124819	EulerOS Virtualization 3.0.1.0 : kernel (EulerOS-SA-2019-1496)	Nessus	Huawei Local Security Checks	critical
109449	Scientific Linux Security Update : kernel on SL7.x x86_64 (Meltdown)	Nessus	Scientific Linux Local Security Checks	critical
109380	CentOS 7 : kernel (CESA-2018:1062)	Nessus	CentOS Local Security Checks	critical
109113	Oracle Linux 7 : kernel (ELSA-2018-1062)	Nessus	Oracle Linux Local Security Checks	critical
108997	RHEL 7 : kernel (RHSA-2018:1062)	Nessus	Red Hat Local Security Checks	critical
108984	RHEL 7 : kernel-rt (RHSA-2018:0676)	Nessus	Red Hat Local Security Checks	critical
103780	Ubuntu 14.04 LTS : linux vulnerabilities (USN-3445-1)	Nessus	Ubuntu Local Security Checks	medium
100238	OracleVM 3.2 : Unbreakable / etc (OVMSA-2017-0106)	Nessus	OracleVM Local Security Checks	critical
100235	Oracle Linux 6 : Unbreakable Enterprise kernel (ELSA-2017-3567)	Nessus	Oracle Linux Local Security Checks	critical
99164	OracleVM 3.2 : Unbreakable / etc (OVMSA-2017-0058)	Nessus	OracleVM Local Security Checks	high
99163	OracleVM 3.3 : Unbreakable / etc (OVMSA-2017-0057) (Dirty COW)	Nessus	OracleVM Local Security Checks	critical
99162	OracleVM 3.4 : Unbreakable / etc (OVMSA-2017-0056)	Nessus	OracleVM Local Security Checks	high
99161	Oracle Linux 6 : Unbreakable Enterprise kernel (ELSA-2017-3535)	Nessus	Oracle Linux Local Security Checks	high
99160	Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3534)	Nessus	Oracle Linux Local Security Checks	high
99159	Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3533)	Nessus	Oracle Linux Local Security Checks	high
97297	SUSE SLES11 Security Update : kernel (SUSE-SU-2017:0494-1)	Nessus	SuSE Local Security Checks	critical
97205	SUSE SLES12 Security Update : kernel (SUSE-SU-2017:0471-1)	Nessus	SuSE Local Security Checks	high
97189	SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2017:0464-1)	Nessus	SuSE Local Security Checks	high
97097	SUSE SLES11 Security Update : kernel (SUSE-SU-2017:0437-1)	Nessus	SuSE Local Security Checks	critical
96903	SUSE SLES11 Security Update : kernel (SUSE-SU-2017:0333-1)	Nessus	SuSE Local Security Checks	critical
96188	Debian DLA-772-1 : linux security update	Nessus	Debian Local Security Checks	critical
96000	Ubuntu 16.10 : linux-raspi2 vulnerabilities (USN-3162-2)	Nessus	Ubuntu Local Security Checks	critical
95999	Ubuntu 16.10 : linux vulnerabilities (USN-3162-1)	Nessus	Ubuntu Local Security Checks	critical
95998	Ubuntu 16.04 LTS : linux-snapdragon vulnerabilities (USN-3161-4)	Nessus	Ubuntu Local Security Checks	critical
95997	Ubuntu 16.04 LTS : linux-raspi2 vulnerabilities (USN-3161-3)	Nessus	Ubuntu Local Security Checks	critical
95996	Ubuntu 14.04 LTS : linux-lts-xenial vulnerabilities (USN-3161-2)	Nessus	Ubuntu Local Security Checks	critical
95995	Ubuntu 16.04 LTS : linux vulnerabilities (USN-3161-1)	Nessus	Ubuntu Local Security Checks	critical
95705	openSUSE Security Update : the Linux Kernel (openSUSE-2016-1431)	Nessus	SuSE Local Security Checks	critical
95702	openSUSE Security Update : the Linux Kernel (openSUSE-2016-1428)	Nessus	SuSE Local Security Checks	critical