GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

BDU:2017-00758 (CVE-2016-5195)

Vulnerability from fstec – Published: 2017-04-06 – Updated: 2025-02-06 – View on bdu.fstec.ru Exploit publicly available Fixed
VLAI
Title
Уязвимость компонента mm/gup.c операционной системы Linux, позволяющая нарушителю повысить свои привилегии
Summary
Уязвимость компонента mm/gup.c ядра операционной системы Linux существует из-за недостаточной проверки состояния ресурса при возможности его совместного использования. Эксплуатация уязвимости может позволить нарушителю, действующему локально, повысить свои привилегии путем некорректного использования функции копирования при записи (COW) для записи данных в области памяти, предназначенных только для чтения
Class
Code vulnerability
Status
Confirmed by the vendor
Exploitation
Timing and state manipulation
Incidents
Being clarified
Remediation
Software update
CWE
  • CWE-362 - Одновременное выполнение с использованием общего ресурса с неправильной синхронизацией («Ситуация гонки»)
References
URL
http://fortiguard.com/advisory/FG-IR-16-063
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=19be0…
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10770
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10774
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10807
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00034.html
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00035.html
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00036.html
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00038.html
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00039.html
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00040.html
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00045.html
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00048.html
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00049.html
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00050.html
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00051.html
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00052.html
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00053.html
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00054.html
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00055.html
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00056.html
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00057.html
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00058.html
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00063.html
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00064.html
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00065.html
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00066.html
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00067.html
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00072.html
http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00033.html
http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00100.html
http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00041.html
http://packetstormsecurity.com/files/139277/Kernel-Live-Patch-Security-Notice-L…
http://packetstormsecurity.com/files/139286/DirtyCow-Linux-Kernel-Race-Condition.html
http://packetstormsecurity.com/files/139287/DirtyCow-Local-Root-Proof-Of-Concept.html
http://packetstormsecurity.com/files/139922/Linux-Kernel-Dirty-COW-PTRACE_POKED…
http://packetstormsecurity.com/files/139923/Linux-Kernel-Dirty-COW-PTRACE_POKED…
http://packetstormsecurity.com/files/142151/Kernel-Live-Patch-Security-Notice-L…
http://rhn.redhat.com/errata/RHSA-2016-2098.html
http://rhn.redhat.com/errata/RHSA-2016-2105.html
http://rhn.redhat.com/errata/RHSA-2016-2106.html
http://rhn.redhat.com/errata/RHSA-2016-2107.html
http://rhn.redhat.com/errata/RHSA-2016-2110.html
http://rhn.redhat.com/errata/RHSA-2016-2118.html
http://rhn.redhat.com/errata/RHSA-2016-2120.html
http://rhn.redhat.com/errata/RHSA-2016-2124.html
http://rhn.redhat.com/errata/RHSA-2016-2126.html
http://rhn.redhat.com/errata/RHSA-2016-2127.html
http://rhn.redhat.com/errata/RHSA-2016-2128.html
http://rhn.redhat.com/errata/RHSA-2016-2132.html
http://rhn.redhat.com/errata/RHSA-2016-2133.html
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-2…
http://www.debian.org/security/2016/dsa-3696
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161207-01-dirtycow-en
http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.3
http://www.openwall.com/lists/oss-security/2016/10/21/1
http://www.openwall.com/lists/oss-security/2016/10/26/7
http://www.openwall.com/lists/oss-security/2016/10/27/13
http://www.openwall.com/lists/oss-security/2016/10/30/1
http://www.openwall.com/lists/oss-security/2016/11/03/7
http://www.openwall.com/lists/oss-security/2022/03/07/1
http://www.openwall.com/lists/oss-security/2022/08/08/1
http://www.openwall.com/lists/oss-security/2022/08/08/2
http://www.openwall.com/lists/oss-security/2022/08/08/7
http://www.openwall.com/lists/oss-security/2022/08/08/8
http://www.openwall.com/lists/oss-security/2022/08/09/4
http://www.openwall.com/lists/oss-security/2022/08/15/1
http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html
http://www.securityfocus.com/archive/1/539611/100/0/threaded
http://www.securityfocus.com/archive/1/540252/100/0/threaded
http://www.securityfocus.com/archive/1/540344/100/0/threaded
http://www.securityfocus.com/archive/1/540736/100/0/threaded
http://www.securityfocus.com/archive/1/archive/1/539611/100/0/threaded
http://www.securityfocus.com/archive/1/archive/1/540252/100/0/threaded
http://www.securityfocus.com/archive/1/archive/1/540344/100/0/threaded
http://www.securityfocus.com/archive/1/archive/1/540736/100/0/threaded
http://www.securityfocus.com/bid/93793
http://www.securitytracker.com/id/1037078
http://www.ubuntu.com/usn/USN-3104-1
http://www.ubuntu.com/usn/USN-3104-2
http://www.ubuntu.com/usn/USN-3105-1
http://www.ubuntu.com/usn/USN-3105-2
http://www.ubuntu.com/usn/USN-3106-1
http://www.ubuntu.com/usn/USN-3106-2
http://www.ubuntu.com/usn/USN-3106-3
http://www.ubuntu.com/usn/USN-3106-4
http://www.ubuntu.com/usn/USN-3107-1
http://www.ubuntu.com/usn/USN-3107-2
https://access.redhat.com/errata/RHSA-2017:0372
https://access.redhat.com/security/cve/cve-2016-5195
https://access.redhat.com/security/vulnerabilities/2706661
https://bto.bluecoat.com/security-advisory/sa134
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1633547
https://bugzilla.redhat.com/show_bug.cgi?id=1384344
https://bugzilla.suse.com/show_bug.cgi?id=1004418
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5195
https://dirtycow.ninja
https://github.com/dirtycow/dirtycow.github.io/wiki/PoCs
https://github.com/dirtycow/dirtycow.github.io/wiki/VulnerabilityDetails
https://github.com/torvalds/linux/commit/19be0eaffa3ac7d8eb6784ad9bdbc7d67ed8e619
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_n…
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_n…
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_n…
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_n…
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_n…
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-…
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-…
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-…
https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+…
https://kc.mcafee.com/corporate/index?page=content&id=SB10176
https://kc.mcafee.com/corporate/index?page=content&id=SB10177
https://kc.mcafee.com/corporate/index?page=content&id=SB10222
https://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.35
https://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.26
https://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.7.9
https://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.3
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapr…
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapr…
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapr…
https://people.canonical.com/~ubuntu-security/cve/2016/CVE-2016-5195.html
https://security.netapp.com/advisory/ntap-20161025-0001/
https://security.paloaltonetworks.com/CVE-2016-5195
https://security-tracker.debian.org/tracker/CVE-2016-5195
https://source.android.com/security/bulletin/2016-11-01.html
https://source.android.com/security/bulletin/2016-12-01.html
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-…
https://ubuntu.com/security/notices/USN-3104-1
https://ubuntu.com/security/notices/USN-3104-2
https://ubuntu.com/security/notices/USN-3105-1
https://ubuntu.com/security/notices/USN-3105-2
https://ubuntu.com/security/notices/USN-3106-1
https://ubuntu.com/security/notices/USN-3106-2
https://ubuntu.com/security/notices/USN-3106-3
https://ubuntu.com/security/notices/USN-3106-4
https://ubuntu.com/security/notices/USN-3107-1
https://ubuntu.com/security/notices/USN-3107-2
https://usn.ubuntu.com/usn/usn-3104-1
https://usn.ubuntu.com/usn/usn-3104-2
https://usn.ubuntu.com/usn/usn-3105-1
https://usn.ubuntu.com/usn/usn-3105-2
https://usn.ubuntu.com/usn/usn-3106-1
https://usn.ubuntu.com/usn/usn-3106-2
https://usn.ubuntu.com/usn/usn-3106-3
https://usn.ubuntu.com/usn/usn-3106-4
https://usn.ubuntu.com/usn/usn-3107-1
https://usn.ubuntu.com/usn/usn-3107-2
https://wiki.astralinux.ru/astra-linux-se15-bulletin-20201201SE15
https://www.arista.com/en/support/advisories-notices/security-advisories/1753-s…
https://www.cve.org/CVERecord?id=CVE-2016-5195
https://www.exploit-db.com/exploits/40611/
https://www.exploit-db.com/exploits/40616/
https://www.exploit-db.com/exploits/40839/
https://www.exploit-db.com/exploits/40847/
https://www.kb.cert.org/vuls/id/243144
Impacted products
Vendors
ООО «РусБИТех-Астра», Сообщество свободного программного обеспечения, ФГУП РФЯЦ-ВНИИЭФ
Products
Astra Linux Special Edition (запись в едином реестре российских программ №369), Debian GNU/Linux, Синергия, Linux
Versions
1.5 «Смоленск» (Astra Linux Special Edition), 9 (Debian GNU/Linux), 8 (Debian GNU/Linux), 10 (Debian GNU/Linux), 1.1.8-3.1+ogun1+cert4 (Синергия), от 4.2 до 4.4.25 включительно (Linux), от 4.5 до 4.7.8 включительно (Linux), от 2.6.16 до 4.1.34 включительно (Linux), от 4.8 до 4.8.2 включительно (Linux)
Product types
Operating system
Platforms
ООО «РусБИТех-Астра» Astra Linux Special Edition 1.5 «Смоленск» (запись в едином реестре российских программ №369), Сообщество свободного программного обеспечения Linux от 2.0 до 4.8.3 64-bit, Сообщество свободного программного обеспечения Linux от 2.0 до 4.8.3 32-bit, Сообщество свободного программного обеспечения Debian GNU/Linux 9, Сообщество свободного программного обеспечения Debian GNU/Linux 8, Сообщество свободного программного обеспечения Debian GNU/Linux 10, ФГУП РФЯЦ-ВНИИЭФ Синергия 1.1.8-3.1+ogun1+cert4
Mitigations
Использование рекомендаций: Для Linux: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=19be0eaffa3ac7d8eb6784ad9bdbc7d67ed8e619 https://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.35 https://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.26 https://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.7.9 https://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.3 Для Debian: Обновление программного обеспечения (пакета linux) до 4.8.3 или более поздней версии Для Astra Linux: Обновление программного обеспечения (пакета linux) до 4.8.3 или более поздней версии Для ОС Синергия: Включение механизма управления доступом SELinux в режиме Enforcing

{
  "CVSS 2.0": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
  "CVSS 3.0": "AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u041e\u041e\u041e \u00ab\u0420\u0443\u0441\u0411\u0418\u0422\u0435\u0445-\u0410\u0441\u0442\u0440\u0430\u00bb, \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f, \u0424\u0413\u0423\u041f \u0420\u0424\u042f\u0426-\u0412\u041d\u0418\u0418\u042d\u0424",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "1.5 \u00ab\u0421\u043c\u043e\u043b\u0435\u043d\u0441\u043a\u00bb (Astra Linux Special Edition), 9 (Debian GNU/Linux), 8 (Debian GNU/Linux), 10 (Debian GNU/Linux), 1.1.8-3.1+ogun1+cert4 (\u0421\u0438\u043d\u0435\u0440\u0433\u0438\u044f), \u043e\u0442 4.2 \u0434\u043e 4.4.25 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Linux), \u043e\u0442 4.5 \u0434\u043e 4.7.8 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Linux), \u043e\u0442 2.6.16 \u0434\u043e 4.1.34 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Linux), \u043e\u0442 4.8 \u0434\u043e 4.8.2 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\n\n\u0414\u043b\u044f Linux:\nhttp://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=19be0eaffa3ac7d8eb6784ad9bdbc7d67ed8e619\nhttps://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.35\nhttps://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.26\nhttps://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.7.9\nhttps://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.3\n\n\u0414\u043b\u044f Debian:\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f (\u043f\u0430\u043a\u0435\u0442\u0430 linux) \u0434\u043e 4.8.3 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438\n\n\u0414\u043b\u044f Astra Linux:\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f (\u043f\u0430\u043a\u0435\u0442\u0430 linux) \u0434\u043e 4.8.3 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438\n\n\u0414\u043b\u044f \u041e\u0421 \u0421\u0438\u043d\u0435\u0440\u0433\u0438\u044f:\n\u0412\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c SELinux \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 Enforcing",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "18.10.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "06.02.2025",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.04.2017",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2017-00758",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2016-5195, CERT VU: 243144, BID ID:93793",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Astra Linux Special Edition (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u2116369), Debian GNU/Linux, \u0421\u0438\u043d\u0435\u0440\u0433\u0438\u044f, Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "\u041e\u041e\u041e \u00ab\u0420\u0443\u0441\u0411\u0418\u0422\u0435\u0445-\u0410\u0441\u0442\u0440\u0430\u00bb Astra Linux Special Edition 1.5 \u00ab\u0421\u043c\u043e\u043b\u0435\u043d\u0441\u043a\u00bb  (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u2116369), \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Linux \u043e\u0442 2.0 \u0434\u043e 4.8.3 64-bit, \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Linux \u043e\u0442 2.0 \u0434\u043e 4.8.3 32-bit, \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Debian GNU/Linux 9 , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Debian GNU/Linux 8 , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Debian GNU/Linux 10 , \u0424\u0413\u0423\u041f \u0420\u0424\u042f\u0426-\u0412\u041d\u0418\u0418\u042d\u0424 \u0421\u0438\u043d\u0435\u0440\u0433\u0438\u044f 1.1.8-3.1+ogun1+cert4 ",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 mm/gup.c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0421\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043e\u0431\u0449\u0435\u0433\u043e \u0440\u0435\u0441\u0443\u0440\u0441\u0430 \u0441 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0435\u0439 (\u00ab\u0421\u0438\u0442\u0443\u0430\u0446\u0438\u044f \u0433\u043e\u043d\u043a\u0438\u00bb) (CWE-362)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 mm/gup.c \u044f\u0434\u0440\u0430 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Linux \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044f \u0440\u0435\u0441\u0443\u0440\u0441\u0430 \u043f\u0440\u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0435\u0433\u043e \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e, \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u043f\u0443\u0442\u0435\u043c \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0440\u0438 \u0437\u0430\u043f\u0438\u0441\u0438 (COW) \u0434\u043b\u044f \u0437\u0430\u043f\u0438\u0441\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0445 \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u043b\u044f \u0447\u0442\u0435\u043d\u0438\u044f",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0440\u043e\u043a\u0430\u043c\u0438 \u0438 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435\u043c",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://fortiguard.com/advisory/FG-IR-16-063\nhttp://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=19be0eaffa3ac7d8eb6784ad9bdbc7d67ed8e619\nhttp://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10770\nhttp://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10774\nhttp://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10807\nhttp://lists.opensuse.org/opensuse-security-announce/2016-10/msg00034.html\nhttp://lists.opensuse.org/opensuse-security-announce/2016-10/msg00035.html\nhttp://lists.opensuse.org/opensuse-security-announce/2016-10/msg00036.html\nhttp://lists.opensuse.org/opensuse-security-announce/2016-10/msg00038.html\nhttp://lists.opensuse.org/opensuse-security-announce/2016-10/msg00039.html\nhttp://lists.opensuse.org/opensuse-security-announce/2016-10/msg00040.html\nhttp://lists.opensuse.org/opensuse-security-announce/2016-10/msg00045.html\nhttp://lists.opensuse.org/opensuse-security-announce/2016-10/msg00048.html\nhttp://lists.opensuse.org/opensuse-security-announce/2016-10/msg00049.html\nhttp://lists.opensuse.org/opensuse-security-announce/2016-10/msg00050.html\nhttp://lists.opensuse.org/opensuse-security-announce/2016-10/msg00051.html\nhttp://lists.opensuse.org/opensuse-security-announce/2016-10/msg00052.html\nhttp://lists.opensuse.org/opensuse-security-announce/2016-10/msg00053.html\nhttp://lists.opensuse.org/opensuse-security-announce/2016-10/msg00054.html\nhttp://lists.opensuse.org/opensuse-security-announce/2016-10/msg00055.html\nhttp://lists.opensuse.org/opensuse-security-announce/2016-10/msg00056.html\nhttp://lists.opensuse.org/opensuse-security-announce/2016-10/msg00057.html\nhttp://lists.opensuse.org/opensuse-security-announce/2016-10/msg00058.html\nhttp://lists.opensuse.org/opensuse-security-announce/2016-10/msg00063.html\nhttp://lists.opensuse.org/opensuse-security-announce/2016-10/msg00064.html\nhttp://lists.opensuse.org/opensuse-security-announce/2016-10/msg00065.html\nhttp://lists.opensuse.org/opensuse-security-announce/2016-10/msg00066.html\nhttp://lists.opensuse.org/opensuse-security-announce/2016-10/msg00067.html\nhttp://lists.opensuse.org/opensuse-security-announce/2016-10/msg00072.html\nhttp://lists.opensuse.org/opensuse-security-announce/2016-12/msg00033.html\nhttp://lists.opensuse.org/opensuse-security-announce/2016-12/msg00100.html\nhttp://lists.opensuse.org/opensuse-security-announce/2020-04/msg00041.html\nhttp://packetstormsecurity.com/files/139277/Kernel-Live-Patch-Security-Notice-LSN-0012-1.html\nhttp://packetstormsecurity.com/files/139286/DirtyCow-Linux-Kernel-Race-Condition.html\nhttp://packetstormsecurity.com/files/139287/DirtyCow-Local-Root-Proof-Of-Concept.html\nhttp://packetstormsecurity.com/files/139922/Linux-Kernel-Dirty-COW-PTRACE_POKEDATA-Privilege-Escalation.html\nhttp://packetstormsecurity.com/files/139923/Linux-Kernel-Dirty-COW-PTRACE_POKEDATA-Privilege-Escalation.html\nhttp://packetstormsecurity.com/files/142151/Kernel-Live-Patch-Security-Notice-LSN-0021-1.html\nhttp://rhn.redhat.com/errata/RHSA-2016-2098.html\nhttp://rhn.redhat.com/errata/RHSA-2016-2105.html\nhttp://rhn.redhat.com/errata/RHSA-2016-2106.html\nhttp://rhn.redhat.com/errata/RHSA-2016-2107.html\nhttp://rhn.redhat.com/errata/RHSA-2016-2110.html\nhttp://rhn.redhat.com/errata/RHSA-2016-2118.html\nhttp://rhn.redhat.com/errata/RHSA-2016-2120.html\nhttp://rhn.redhat.com/errata/RHSA-2016-2124.html\nhttp://rhn.redhat.com/errata/RHSA-2016-2126.html\nhttp://rhn.redhat.com/errata/RHSA-2016-2127.html\nhttp://rhn.redhat.com/errata/RHSA-2016-2128.html\nhttp://rhn.redhat.com/errata/RHSA-2016-2132.html\nhttp://rhn.redhat.com/errata/RHSA-2016-2133.html\nhttp://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161026-linux\nhttp://www.debian.org/security/2016/dsa-3696\nhttp://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161207-01-dirtycow-en\nhttp://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.3\nhttp://www.openwall.com/lists/oss-security/2016/10/21/1\nhttp://www.openwall.com/lists/oss-security/2016/10/26/7\nhttp://www.openwall.com/lists/oss-security/2016/10/27/13\nhttp://www.openwall.com/lists/oss-security/2016/10/30/1\nhttp://www.openwall.com/lists/oss-security/2016/11/03/7\nhttp://www.openwall.com/lists/oss-security/2022/03/07/1\nhttp://www.openwall.com/lists/oss-security/2022/08/08/1\nhttp://www.openwall.com/lists/oss-security/2022/08/08/2\nhttp://www.openwall.com/lists/oss-security/2022/08/08/7\nhttp://www.openwall.com/lists/oss-security/2022/08/08/8\nhttp://www.openwall.com/lists/oss-security/2022/08/09/4\nhttp://www.openwall.com/lists/oss-security/2022/08/15/1\nhttp://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html\nhttp://www.securityfocus.com/archive/1/539611/100/0/threaded\nhttp://www.securityfocus.com/archive/1/540252/100/0/threaded\nhttp://www.securityfocus.com/archive/1/540344/100/0/threaded\nhttp://www.securityfocus.com/archive/1/540736/100/0/threaded\nhttp://www.securityfocus.com/archive/1/archive/1/539611/100/0/threaded\nhttp://www.securityfocus.com/archive/1/archive/1/540252/100/0/threaded\nhttp://www.securityfocus.com/archive/1/archive/1/540344/100/0/threaded\nhttp://www.securityfocus.com/archive/1/archive/1/540736/100/0/threaded\nhttp://www.securityfocus.com/bid/93793\nhttp://www.securitytracker.com/id/1037078\nhttp://www.ubuntu.com/usn/USN-3104-1\nhttp://www.ubuntu.com/usn/USN-3104-2\nhttp://www.ubuntu.com/usn/USN-3105-1\nhttp://www.ubuntu.com/usn/USN-3105-2\nhttp://www.ubuntu.com/usn/USN-3106-1\nhttp://www.ubuntu.com/usn/USN-3106-2\nhttp://www.ubuntu.com/usn/USN-3106-3\nhttp://www.ubuntu.com/usn/USN-3106-4\nhttp://www.ubuntu.com/usn/USN-3107-1\nhttp://www.ubuntu.com/usn/USN-3107-2\nhttps://access.redhat.com/errata/RHSA-2017:0372\nhttps://access.redhat.com/security/cve/cve-2016-5195\nhttps://access.redhat.com/security/vulnerabilities/2706661\nhttps://bto.bluecoat.com/security-advisory/sa134\nhttps://bugs.launchpad.net/ubuntu/+source/linux/+bug/1633547\nhttps://bugzilla.redhat.com/show_bug.cgi?id=1384344\nhttps://bugzilla.suse.com/show_bug.cgi?id=1004418\nhttps://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5195\nhttps://dirtycow.ninja\nhttps://github.com/dirtycow/dirtycow.github.io/wiki/PoCs\nhttps://github.com/dirtycow/dirtycow.github.io/wiki/VulnerabilityDetails\nhttps://github.com/torvalds/linux/commit/19be0eaffa3ac7d8eb6784ad9bdbc7d67ed8e619\nhttps://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-c05352241\nhttps://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbgn03707en_us\nhttps://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbgn03722en_us\nhttps://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbgn03742en_us\nhttps://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbgn03761en_us\nhttps://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05341463\nhttps://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05347541\nhttps://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05352241\nhttps://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes\nhttps://kc.mcafee.com/corporate/index?page=content\u0026id=SB10176\nhttps://kc.mcafee.com/corporate/index?page=content\u0026id=SB10177\nhttps://kc.mcafee.com/corporate/index?page=content\u0026id=SB10222\nhttps://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.35\nhttps://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.26\nhttps://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.7.9\nhttps://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.3\nhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E7M62SRP6CZLJ4ZXCRZKV4WPLQBSR7DT/\nhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NWMDLBWMGZKFHMRJ7QUQVCERP5QHDB6W/\nhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W3APRVDVPDBXLH4DC5UKZVCR742MJIM3/\nhttps://people.canonical.com/~ubuntu-security/cve/2016/CVE-2016-5195.html\nhttps://security.netapp.com/advisory/ntap-20161025-0001/\nhttps://security.paloaltonetworks.com/CVE-2016-5195\nhttps://security-tracker.debian.org/tracker/CVE-2016-5195\nhttps://source.android.com/security/bulletin/2016-11-01.html\nhttps://source.android.com/security/bulletin/2016-12-01.html\nhttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181107-vcsd\nhttps://ubuntu.com/security/notices/USN-3104-1\nhttps://ubuntu.com/security/notices/USN-3104-2\nhttps://ubuntu.com/security/notices/USN-3105-1\nhttps://ubuntu.com/security/notices/USN-3105-2\nhttps://ubuntu.com/security/notices/USN-3106-1\nhttps://ubuntu.com/security/notices/USN-3106-2\nhttps://ubuntu.com/security/notices/USN-3106-3\nhttps://ubuntu.com/security/notices/USN-3106-4\nhttps://ubuntu.com/security/notices/USN-3107-1\nhttps://ubuntu.com/security/notices/USN-3107-2\nhttps://usn.ubuntu.com/usn/usn-3104-1\nhttps://usn.ubuntu.com/usn/usn-3104-2\nhttps://usn.ubuntu.com/usn/usn-3105-1\nhttps://usn.ubuntu.com/usn/usn-3105-2\nhttps://usn.ubuntu.com/usn/usn-3106-1\nhttps://usn.ubuntu.com/usn/usn-3106-2\nhttps://usn.ubuntu.com/usn/usn-3106-3\nhttps://usn.ubuntu.com/usn/usn-3106-4\nhttps://usn.ubuntu.com/usn/usn-3107-1\nhttps://usn.ubuntu.com/usn/usn-3107-2\nhttps://wiki.astralinux.ru/astra-linux-se15-bulletin-20201201SE15\nhttps://www.arista.com/en/support/advisories-notices/security-advisories/1753-security-advisory-0026\nhttps://www.cve.org/CVERecord?id=CVE-2016-5195\nhttps://www.exploit-db.com/exploits/40611/\nhttps://www.exploit-db.com/exploits/40616/\nhttps://www.exploit-db.com/exploits/40839/\nhttps://www.exploit-db.com/exploits/40847/\nhttps://www.kb.cert.org/vuls/id/243144",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-362",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,2)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7)\n\u041d\u0435\u0442 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 4.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 0)"
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Loading…

Detection rules are retrieved from Rulezet.

Loading…

Loading…

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.


Loading…