Free vulnerability management software
Mageni is a free, open-source, and powerful vulnerability management platform that takes the pain out of cybersecurity and vulnerability management.
Download Now
CVE-2016-0723
CVE information
Published
Last Modified
CVSSv2.0 Severity
CVSSv3.1 Severity
Impact Analysis
Description
Race condition in the tty_ioctl function in drivers/tty/tty_io.c in the Linux kernel through 4.4.1 allows local users to obtain sensitive information from kernel memory or cause a denial of service (use-after-free and system crash) by making a TIOCGETD ioctl call during processing of a TIOCSETD ioctl call..
CVSSv2.0 Score
- Severity
- Medium
- Base Score
- 5.6/10
- Exploit Score
- 3.9/10
- Access Vector
- Local
- Access Complexity
- Low
- Authentication Required
- None
- Impact Score
- 7.8/10
- Confidentiality Impact
- Partial
- Availability Impact
- Complete
- Integrity Impact
- None
CVSSv3.1 Score
- Severity
- Medium
- Base Score
- 6.8/10
- Exploit Score
- 2.5/10
- Access Vector
- Local
- Access Complexity
- Low
- Privileges Required
- None
- Impact Score
- 4.2/10
- Confidentiality Impact
- Low
- Availability Impact
- High
- Integrity Impact
- None
- Scope
- Unchanged
- User Interaction
- None
Products Affected
| CPE | Affected | Vulnerable | Excluding | Edit |
|---|---|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
Yes
|
- | - |
References
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5c17c861a357e9
- https://github.com/torvalds/linux/commit/5c17c861a357e9458001f021a7afa7aab9937439
- https://bugzilla.redhat.com/show_bug.cgi?id=1296253
- https://security-tracker.debian.org/tracker/CVE-2016-0723
- http://source.android.com/security/bulletin/2016-07-01.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html
- http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html
- http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html
- http://www.securityfocus.com/bid/82950
- http://www.debian.org/security/2016/dsa-3503
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html
- http://www.ubuntu.com/usn/USN-2967-1
- http://www.ubuntu.com/usn/USN-2967-2
- http://www.ubuntu.com/usn/USN-2930-1
- http://www.ubuntu.com/usn/USN-2929-1
- http://www.ubuntu.com/usn/USN-2932-1
- http://www.ubuntu.com/usn/USN-2948-2
- http://www.securitytracker.com/id/1035695
- http://www.ubuntu.com/usn/USN-2930-2
- http://www.ubuntu.com/usn/USN-2929-2
- http://www.ubuntu.com/usn/USN-2930-3
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html
- http://www.ubuntu.com/usn/USN-2948-1
- http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176484.html
- http://www.debian.org/security/2016/dsa-3448
- http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176464.html
- https://support.f5.com/csp/article/K43650115
Ease with a few clicks your vulnerability scanning, assessment and management process
Mageni is a free and open-source vulnerability management software. Download it now.
1. Download Multipass
2. Launch a multipass instance
3. Install Mageni
1. If you don’t have it already, install Brew. Then, to install Multipass simply execute:
2. Launch a multipass instance
2. Install Mageni
1. Download the installer for Windows
2. Ensure your network is private
3. Run the installer
4. Launch a multipass instance
5. Log into the multipass instance
6. Install Mageni