CVE-2016-1583

高 7.8CVE-2016-1583 · 27/06/2016 公開 · 17/06/2026 更新

要点

CVE-2016-1583 は suse linux enterprise software development kit (novell) に影響する深刻度「高」 (CVSS 7.8) の脆弱性です。
今後30日間に悪用される確率（EPSS）：1.4%（全脆弱性の 72.4% より高い）。
修正版の情報はまだありません。参考情報のベンダー勧告を確認してください。

パッケージ	影響を受けるバージョン	修正済みバージョン
suse linux enterprise software development kit novell	`= 11.0= 12.0`	修正版なし

概要

The ecryptfs_privileged_open function in fs/ecryptfs/kthread.c in the Linux kernel before 4.6.3 allows local users to gain privileges or cause a denial of service (stack memory consumption) via vectors involving crafted mmap calls for /proc pathnames, leading to recursive pagefault handling.

参考情報

git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit · Vendor Advisory
git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit · Vendor Advisory
lists.opensuse.org/opensuse-security-announce/2016-06/msg00027.html · Third Party Advisory
lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html · Third Party Advisory
lists.opensuse.org/opensuse-security-announce/2016-06/msg00056.html · Third Party Advisory
lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2016-08/msg00003.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2016-08/msg00008.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2016-08/msg00009.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2016-08/msg00014.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2016-08/msg00016.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2016-08/msg00018.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2016-08/msg00019.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2016-08/msg00020.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2016-08/msg00021.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2016-08/msg00022.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2016-08/msg00026.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html · Mailing List
packetstormsecurity.com/files/137560/Linux-ecryptfs-Stack-Overflow.html · Third Party Advisory
rhn.redhat.com/errata/RHSA-2016-2124.html · Third Party Advisory
rhn.redhat.com/errata/RHSA-2016-2766.html · Third Party Advisory
debian.org/security/2016/dsa-3607 · Third Party Advisory
openwall.com/lists/oss-security/2016/06/10/8 · Mailing List
openwall.com/lists/oss-security/2016/06/22/1 · Mailing List
securityfocus.com/bid/91157 · Third Party Advisory
securitytracker.com/id/1036763 · Third Party Advisory
ubuntu.com/usn/USN-2996-1 · Third Party Advisory
ubuntu.com/usn/USN-2997-1 · Third Party Advisory
ubuntu.com/usn/USN-2998-1 · Third Party Advisory
ubuntu.com/usn/USN-2999-1 · Third Party Advisory
ubuntu.com/usn/USN-3000-1 · Third Party Advisory
ubuntu.com/usn/USN-3001-1 · Third Party Advisory
ubuntu.com/usn/USN-3002-1 · Third Party Advisory
ubuntu.com/usn/USN-3003-1 · Third Party Advisory
ubuntu.com/usn/USN-3004-1 · Third Party Advisory
ubuntu.com/usn/USN-3005-1 · Third Party Advisory
ubuntu.com/usn/USN-3006-1 · Third Party Advisory
ubuntu.com/usn/USN-3007-1 · Third Party Advisory
ubuntu.com/usn/USN-3008-1 · Third Party Advisory
access.redhat.com/errata/RHSA-2017:2760 · Third Party Advisory
bugs.chromium.org/p/project-zero/issues/detail · Vendor Advisory
bugzilla.redhat.com/show_bug.cgi · Issue Tracking
torvalds/linux commit 2f36db7 · Vendor Advisory
torvalds/linux commit f0fe970 · Third Party Advisory
torvalds/linux commit f5364c1 · Vendor Advisory
exploit-db.com/exploits/39992 · Exploit
kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.6.3 · Release Notes

suse linux enterprise software development kit のその他の脆弱性

すべて見る →

これらの製品をお使いですか？サイトをスキャンして、脆弱なバージョンが公開されていないか確認しましょう。

無料でサイトをスキャン