BDU:2017-00758 (CVE-2016-5195)
Vulnerability from fstec – Published: 2017-04-06 – Updated: 2025-02-06 – View on bdu.fstec.ru Exploit publicly available Fixed
VLAI
Title
Уязвимость компонента mm/gup.c операционной системы Linux, позволяющая нарушителю повысить свои привилегии
Summary
Уязвимость компонента mm/gup.c ядра операционной системы Linux существует из-за недостаточной проверки состояния ресурса при возможности его совместного использования. Эксплуатация уязвимости может позволить нарушителю, действующему локально, повысить свои привилегии путем некорректного использования функции копирования при записи (COW) для записи данных в области памяти, предназначенных только для чтения
Severity
Class
Code vulnerability
Status
Confirmed by the vendor
Exploitation
Timing and state manipulation
Incidents
Being clarified
Remediation
Software update
CWE
- CWE-362 - Одновременное выполнение с использованием общего ресурса с неправильной синхронизацией («Ситуация гонки»)
References
154 references
Impacted products
4 products
from 3 vendors
Vendors
ООО «РусБИТех-Астра», Сообщество свободного программного обеспечения, ФГУП РФЯЦ-ВНИИЭФ
Products
Astra Linux Special Edition (запись в едином реестре российских программ №369), Debian GNU/Linux, Синергия, Linux
Versions
1.5 «Смоленск» (Astra Linux Special Edition), 9 (Debian GNU/Linux), 8 (Debian GNU/Linux), 10 (Debian GNU/Linux), 1.1.8-3.1+ogun1+cert4 (Синергия), от 4.2 до 4.4.25 включительно (Linux), от 4.5 до 4.7.8 включительно (Linux), от 2.6.16 до 4.1.34 включительно (Linux), от 4.8 до 4.8.2 включительно (Linux)
Product types
Operating system
Platforms
ООО «РусБИТех-Астра» Astra Linux Special Edition 1.5 «Смоленск» (запись в едином реестре российских программ №369), Сообщество свободного программного обеспечения Linux от 2.0 до 4.8.3 64-bit, Сообщество свободного программного обеспечения Linux от 2.0 до 4.8.3 32-bit, Сообщество свободного программного обеспечения Debian GNU/Linux 9, Сообщество свободного программного обеспечения Debian GNU/Linux 8, Сообщество свободного программного обеспечения Debian GNU/Linux 10, ФГУП РФЯЦ-ВНИИЭФ Синергия 1.1.8-3.1+ogun1+cert4
Mitigations
Использование рекомендаций:
Для Linux:
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=19be0eaffa3ac7d8eb6784ad9bdbc7d67ed8e619
https://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.35
https://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.26
https://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.7.9
https://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.3
Для Debian:
Обновление программного обеспечения (пакета linux) до 4.8.3 или более поздней версии
Для Astra Linux:
Обновление программного обеспечения (пакета linux) до 4.8.3 или более поздней версии
Для ОС Синергия:
Включение механизма управления доступом SELinux в режиме Enforcing
{
"CVSS 2.0": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
"CVSS 3.0": "AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"CVSS 4.0": null,
"remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
"remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
"\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u041e\u041e\u041e \u00ab\u0420\u0443\u0441\u0411\u0418\u0422\u0435\u0445-\u0410\u0441\u0442\u0440\u0430\u00bb, \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f, \u0424\u0413\u0423\u041f \u0420\u0424\u042f\u0426-\u0412\u041d\u0418\u0418\u042d\u0424",
"\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "1.5 \u00ab\u0421\u043c\u043e\u043b\u0435\u043d\u0441\u043a\u00bb (Astra Linux Special Edition), 9 (Debian GNU/Linux), 8 (Debian GNU/Linux), 10 (Debian GNU/Linux), 1.1.8-3.1+ogun1+cert4 (\u0421\u0438\u043d\u0435\u0440\u0433\u0438\u044f), \u043e\u0442 4.2 \u0434\u043e 4.4.25 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Linux), \u043e\u0442 4.5 \u0434\u043e 4.7.8 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Linux), \u043e\u0442 2.6.16 \u0434\u043e 4.1.34 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Linux), \u043e\u0442 4.8 \u0434\u043e 4.8.2 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Linux)",
"\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\n\n\u0414\u043b\u044f Linux:\nhttp://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=19be0eaffa3ac7d8eb6784ad9bdbc7d67ed8e619\nhttps://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.35\nhttps://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.26\nhttps://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.7.9\nhttps://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.3\n\n\u0414\u043b\u044f Debian:\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f (\u043f\u0430\u043a\u0435\u0442\u0430 linux) \u0434\u043e 4.8.3 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438\n\n\u0414\u043b\u044f Astra Linux:\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f (\u043f\u0430\u043a\u0435\u0442\u0430 linux) \u0434\u043e 4.8.3 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438\n\n\u0414\u043b\u044f \u041e\u0421 \u0421\u0438\u043d\u0435\u0440\u0433\u0438\u044f:\n\u0412\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c SELinux \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 Enforcing",
"\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "18.10.2016",
"\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "06.02.2025",
"\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.04.2017",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2017-00758",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2016-5195, CERT VU: 243144, BID ID:93793",
"\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
"\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
"\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Astra Linux Special Edition (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u2116369), Debian GNU/Linux, \u0421\u0438\u043d\u0435\u0440\u0433\u0438\u044f, Linux",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "\u041e\u041e\u041e \u00ab\u0420\u0443\u0441\u0411\u0418\u0422\u0435\u0445-\u0410\u0441\u0442\u0440\u0430\u00bb Astra Linux Special Edition 1.5 \u00ab\u0421\u043c\u043e\u043b\u0435\u043d\u0441\u043a\u00bb (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u2116369), \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Linux \u043e\u0442 2.0 \u0434\u043e 4.8.3 64-bit, \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Linux \u043e\u0442 2.0 \u0434\u043e 4.8.3 32-bit, \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Debian GNU/Linux 9 , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Debian GNU/Linux 8 , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Debian GNU/Linux 10 , \u0424\u0413\u0423\u041f \u0420\u0424\u042f\u0426-\u0412\u041d\u0418\u0418\u042d\u0424 \u0421\u0438\u043d\u0435\u0440\u0433\u0438\u044f 1.1.8-3.1+ogun1+cert4 ",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 mm/gup.c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438",
"\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0421\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043e\u0431\u0449\u0435\u0433\u043e \u0440\u0435\u0441\u0443\u0440\u0441\u0430 \u0441 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0435\u0439 (\u00ab\u0421\u0438\u0442\u0443\u0430\u0446\u0438\u044f \u0433\u043e\u043d\u043a\u0438\u00bb) (CWE-362)",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 mm/gup.c \u044f\u0434\u0440\u0430 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Linux \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044f \u0440\u0435\u0441\u0443\u0440\u0441\u0430 \u043f\u0440\u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0435\u0433\u043e \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e, \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u043f\u0443\u0442\u0435\u043c \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0440\u0438 \u0437\u0430\u043f\u0438\u0441\u0438 (COW) \u0434\u043b\u044f \u0437\u0430\u043f\u0438\u0441\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0445 \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u043b\u044f \u0447\u0442\u0435\u043d\u0438\u044f",
"\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
"\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
"\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0440\u043e\u043a\u0430\u043c\u0438 \u0438 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435\u043c",
"\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://fortiguard.com/advisory/FG-IR-16-063\nhttp://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=19be0eaffa3ac7d8eb6784ad9bdbc7d67ed8e619\nhttp://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10770\nhttp://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10774\nhttp://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10807\nhttp://lists.opensuse.org/opensuse-security-announce/2016-10/msg00034.html\nhttp://lists.opensuse.org/opensuse-security-announce/2016-10/msg00035.html\nhttp://lists.opensuse.org/opensuse-security-announce/2016-10/msg00036.html\nhttp://lists.opensuse.org/opensuse-security-announce/2016-10/msg00038.html\nhttp://lists.opensuse.org/opensuse-security-announce/2016-10/msg00039.html\nhttp://lists.opensuse.org/opensuse-security-announce/2016-10/msg00040.html\nhttp://lists.opensuse.org/opensuse-security-announce/2016-10/msg00045.html\nhttp://lists.opensuse.org/opensuse-security-announce/2016-10/msg00048.html\nhttp://lists.opensuse.org/opensuse-security-announce/2016-10/msg00049.html\nhttp://lists.opensuse.org/opensuse-security-announce/2016-10/msg00050.html\nhttp://lists.opensuse.org/opensuse-security-announce/2016-10/msg00051.html\nhttp://lists.opensuse.org/opensuse-security-announce/2016-10/msg00052.html\nhttp://lists.opensuse.org/opensuse-security-announce/2016-10/msg00053.html\nhttp://lists.opensuse.org/opensuse-security-announce/2016-10/msg00054.html\nhttp://lists.opensuse.org/opensuse-security-announce/2016-10/msg00055.html\nhttp://lists.opensuse.org/opensuse-security-announce/2016-10/msg00056.html\nhttp://lists.opensuse.org/opensuse-security-announce/2016-10/msg00057.html\nhttp://lists.opensuse.org/opensuse-security-announce/2016-10/msg00058.html\nhttp://lists.opensuse.org/opensuse-security-announce/2016-10/msg00063.html\nhttp://lists.opensuse.org/opensuse-security-announce/2016-10/msg00064.html\nhttp://lists.opensuse.org/opensuse-security-announce/2016-10/msg00065.html\nhttp://lists.opensuse.org/opensuse-security-announce/2016-10/msg00066.html\nhttp://lists.opensuse.org/opensuse-security-announce/2016-10/msg00067.html\nhttp://lists.opensuse.org/opensuse-security-announce/2016-10/msg00072.html\nhttp://lists.opensuse.org/opensuse-security-announce/2016-12/msg00033.html\nhttp://lists.opensuse.org/opensuse-security-announce/2016-12/msg00100.html\nhttp://lists.opensuse.org/opensuse-security-announce/2020-04/msg00041.html\nhttp://packetstormsecurity.com/files/139277/Kernel-Live-Patch-Security-Notice-LSN-0012-1.html\nhttp://packetstormsecurity.com/files/139286/DirtyCow-Linux-Kernel-Race-Condition.html\nhttp://packetstormsecurity.com/files/139287/DirtyCow-Local-Root-Proof-Of-Concept.html\nhttp://packetstormsecurity.com/files/139922/Linux-Kernel-Dirty-COW-PTRACE_POKEDATA-Privilege-Escalation.html\nhttp://packetstormsecurity.com/files/139923/Linux-Kernel-Dirty-COW-PTRACE_POKEDATA-Privilege-Escalation.html\nhttp://packetstormsecurity.com/files/142151/Kernel-Live-Patch-Security-Notice-LSN-0021-1.html\nhttp://rhn.redhat.com/errata/RHSA-2016-2098.html\nhttp://rhn.redhat.com/errata/RHSA-2016-2105.html\nhttp://rhn.redhat.com/errata/RHSA-2016-2106.html\nhttp://rhn.redhat.com/errata/RHSA-2016-2107.html\nhttp://rhn.redhat.com/errata/RHSA-2016-2110.html\nhttp://rhn.redhat.com/errata/RHSA-2016-2118.html\nhttp://rhn.redhat.com/errata/RHSA-2016-2120.html\nhttp://rhn.redhat.com/errata/RHSA-2016-2124.html\nhttp://rhn.redhat.com/errata/RHSA-2016-2126.html\nhttp://rhn.redhat.com/errata/RHSA-2016-2127.html\nhttp://rhn.redhat.com/errata/RHSA-2016-2128.html\nhttp://rhn.redhat.com/errata/RHSA-2016-2132.html\nhttp://rhn.redhat.com/errata/RHSA-2016-2133.html\nhttp://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161026-linux\nhttp://www.debian.org/security/2016/dsa-3696\nhttp://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161207-01-dirtycow-en\nhttp://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.3\nhttp://www.openwall.com/lists/oss-security/2016/10/21/1\nhttp://www.openwall.com/lists/oss-security/2016/10/26/7\nhttp://www.openwall.com/lists/oss-security/2016/10/27/13\nhttp://www.openwall.com/lists/oss-security/2016/10/30/1\nhttp://www.openwall.com/lists/oss-security/2016/11/03/7\nhttp://www.openwall.com/lists/oss-security/2022/03/07/1\nhttp://www.openwall.com/lists/oss-security/2022/08/08/1\nhttp://www.openwall.com/lists/oss-security/2022/08/08/2\nhttp://www.openwall.com/lists/oss-security/2022/08/08/7\nhttp://www.openwall.com/lists/oss-security/2022/08/08/8\nhttp://www.openwall.com/lists/oss-security/2022/08/09/4\nhttp://www.openwall.com/lists/oss-security/2022/08/15/1\nhttp://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html\nhttp://www.securityfocus.com/archive/1/539611/100/0/threaded\nhttp://www.securityfocus.com/archive/1/540252/100/0/threaded\nhttp://www.securityfocus.com/archive/1/540344/100/0/threaded\nhttp://www.securityfocus.com/archive/1/540736/100/0/threaded\nhttp://www.securityfocus.com/archive/1/archive/1/539611/100/0/threaded\nhttp://www.securityfocus.com/archive/1/archive/1/540252/100/0/threaded\nhttp://www.securityfocus.com/archive/1/archive/1/540344/100/0/threaded\nhttp://www.securityfocus.com/archive/1/archive/1/540736/100/0/threaded\nhttp://www.securityfocus.com/bid/93793\nhttp://www.securitytracker.com/id/1037078\nhttp://www.ubuntu.com/usn/USN-3104-1\nhttp://www.ubuntu.com/usn/USN-3104-2\nhttp://www.ubuntu.com/usn/USN-3105-1\nhttp://www.ubuntu.com/usn/USN-3105-2\nhttp://www.ubuntu.com/usn/USN-3106-1\nhttp://www.ubuntu.com/usn/USN-3106-2\nhttp://www.ubuntu.com/usn/USN-3106-3\nhttp://www.ubuntu.com/usn/USN-3106-4\nhttp://www.ubuntu.com/usn/USN-3107-1\nhttp://www.ubuntu.com/usn/USN-3107-2\nhttps://access.redhat.com/errata/RHSA-2017:0372\nhttps://access.redhat.com/security/cve/cve-2016-5195\nhttps://access.redhat.com/security/vulnerabilities/2706661\nhttps://bto.bluecoat.com/security-advisory/sa134\nhttps://bugs.launchpad.net/ubuntu/+source/linux/+bug/1633547\nhttps://bugzilla.redhat.com/show_bug.cgi?id=1384344\nhttps://bugzilla.suse.com/show_bug.cgi?id=1004418\nhttps://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5195\nhttps://dirtycow.ninja\nhttps://github.com/dirtycow/dirtycow.github.io/wiki/PoCs\nhttps://github.com/dirtycow/dirtycow.github.io/wiki/VulnerabilityDetails\nhttps://github.com/torvalds/linux/commit/19be0eaffa3ac7d8eb6784ad9bdbc7d67ed8e619\nhttps://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-c05352241\nhttps://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbgn03707en_us\nhttps://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbgn03722en_us\nhttps://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbgn03742en_us\nhttps://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbgn03761en_us\nhttps://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05341463\nhttps://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05347541\nhttps://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05352241\nhttps://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes\nhttps://kc.mcafee.com/corporate/index?page=content\u0026id=SB10176\nhttps://kc.mcafee.com/corporate/index?page=content\u0026id=SB10177\nhttps://kc.mcafee.com/corporate/index?page=content\u0026id=SB10222\nhttps://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.35\nhttps://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.26\nhttps://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.7.9\nhttps://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.3\nhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E7M62SRP6CZLJ4ZXCRZKV4WPLQBSR7DT/\nhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NWMDLBWMGZKFHMRJ7QUQVCERP5QHDB6W/\nhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W3APRVDVPDBXLH4DC5UKZVCR742MJIM3/\nhttps://people.canonical.com/~ubuntu-security/cve/2016/CVE-2016-5195.html\nhttps://security.netapp.com/advisory/ntap-20161025-0001/\nhttps://security.paloaltonetworks.com/CVE-2016-5195\nhttps://security-tracker.debian.org/tracker/CVE-2016-5195\nhttps://source.android.com/security/bulletin/2016-11-01.html\nhttps://source.android.com/security/bulletin/2016-12-01.html\nhttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181107-vcsd\nhttps://ubuntu.com/security/notices/USN-3104-1\nhttps://ubuntu.com/security/notices/USN-3104-2\nhttps://ubuntu.com/security/notices/USN-3105-1\nhttps://ubuntu.com/security/notices/USN-3105-2\nhttps://ubuntu.com/security/notices/USN-3106-1\nhttps://ubuntu.com/security/notices/USN-3106-2\nhttps://ubuntu.com/security/notices/USN-3106-3\nhttps://ubuntu.com/security/notices/USN-3106-4\nhttps://ubuntu.com/security/notices/USN-3107-1\nhttps://ubuntu.com/security/notices/USN-3107-2\nhttps://usn.ubuntu.com/usn/usn-3104-1\nhttps://usn.ubuntu.com/usn/usn-3104-2\nhttps://usn.ubuntu.com/usn/usn-3105-1\nhttps://usn.ubuntu.com/usn/usn-3105-2\nhttps://usn.ubuntu.com/usn/usn-3106-1\nhttps://usn.ubuntu.com/usn/usn-3106-2\nhttps://usn.ubuntu.com/usn/usn-3106-3\nhttps://usn.ubuntu.com/usn/usn-3106-4\nhttps://usn.ubuntu.com/usn/usn-3107-1\nhttps://usn.ubuntu.com/usn/usn-3107-2\nhttps://wiki.astralinux.ru/astra-linux-se15-bulletin-20201201SE15\nhttps://www.arista.com/en/support/advisories-notices/security-advisories/1753-security-advisory-0026\nhttps://www.cve.org/CVERecord?id=CVE-2016-5195\nhttps://www.exploit-db.com/exploits/40611/\nhttps://www.exploit-db.com/exploits/40616/\nhttps://www.exploit-db.com/exploits/40839/\nhttps://www.exploit-db.com/exploits/40847/\nhttps://www.kb.cert.org/vuls/id/243144",
"\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
"\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
"\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-362",
"\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,2)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7)\n\u041d\u0435\u0442 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 4.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 0)"
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…