usn-3000-1
Vulnerability from osv_ubuntu
Published
2016-06-10 05:36
Modified
2026-02-10 04:41
Summary
linux-lts-utopic vulnerabilities
Details

Justin Yackoski discovered that the Atheros L2 Ethernet Driver in the Linux kernel incorrectly enables scatter/gather I/O. A remote attacker could use this to obtain potentially sensitive information from kernel memory. (CVE-2016-2117)

Jann Horn discovered that eCryptfs improperly attempted to use the mmap() handler of a lower filesystem that did not implement one, causing a recursive page fault to occur. A local unprivileged attacker could use to cause a denial of service (system crash) or possibly execute arbitrary code with administrative privileges. (CVE-2016-1583)

Jason A. Donenfeld discovered multiple out-of-bounds reads in the OZMO USB over wifi device drivers in the Linux kernel. A remote attacker could use this to cause a denial of service (system crash) or obtain potentially sensitive information from kernel memory. (CVE-2015-4004)

Ralf Spenneberg discovered that the Linux kernel's GTCO digitizer USB device driver did not properly validate endpoint descriptors. An attacker with physical access could use this to cause a denial of service (system crash). (CVE-2016-2187)

Sergej Schumilo, Hendrik Schwartke, and Ralf Spenneberg discovered that the MCT USB RS232 Converter device driver in the Linux kernel did not properly validate USB device descriptors. An attacker with physical access could use this to cause a denial of service (system crash). (CVE-2016-3136)

Sergej Schumilo, Hendrik Schwartke, and Ralf Spenneberg discovered that the Cypress M8 USB device driver in the Linux kernel did not properly validate USB device descriptors. An attacker with physical access could use this to cause a denial of service (system crash). (CVE-2016-3137)

Sergej Schumilo, Hendrik Schwartke, and Ralf Spenneberg discovered that the Linux kernel's USB driver for Digi AccelePort serial converters did not properly validate USB device descriptors. An attacker with physical access could use this to cause a denial of service (system crash). (CVE-2016-3140)

Hector Marco and Ismael Ripoll discovered that the Linux kernel would improperly disable Address Space Layout Randomization (ASLR) for x86 processes running in 32 bit mode if stack-consumption resource limits were disabled. A local attacker could use this to make it easier to exploit an existing vulnerability in a setuid/setgid program. (CVE-2016-3672)

It was discovered that the Linux kernel's USB driver for IMS Passenger Control Unit devices did not properly validate the device's interfaces. An attacker with physical access could use this to cause a denial of service (system crash). (CVE-2016-3689)

Andrey Konovalov discovered that the CDC Network Control Model USB driver in the Linux kernel did not cancel work events queued if a later error occurred, resulting in a use-after-free. An attacker with physical access could use this to cause a denial of service (system crash). (CVE-2016-3951)

It was discovered that an out-of-bounds write could occur when handling incoming packets in the USB/IP implementation in the Linux kernel. A remote attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2016-3955)

Kangjie Lu discovered an information leak in the ANSI/IEEE 802.2 LLC type 2 Support implementations in the Linux kernel. A local attacker could use this to obtain potentially sensitive information from kernel memory. (CVE-2016-4485)

Kangjie Lu discovered an information leak in the routing netlink socket interface (rtnetlink) implementation in the Linux kernel. A local attacker could use this to obtain potentially sensitive information from kernel memory. (CVE-2016-4486)

It was discovered that in some situations the Linux kernel did not handle propagated mounts correctly. A local unprivileged attacker could use this to cause a denial of service (system crash). (CVE-2016-4581)

References
To clipboard 

{
  "affected": [
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2015-4004",
              "severity": [
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2016-1583",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "high",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2016-2117",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "high",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2016-2187",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2016-3136",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2016-3137",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2016-3140",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2016-3672",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2016-3689",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2016-3951",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2016-3955",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2016-4485",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2016-4486",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2016-4581",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:14.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "block-modules-3.16.0-73-generic-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "block-modules-3.16.0-73-generic-lpae-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "block-modules-3.16.0-73-powerpc-e500mc-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "block-modules-3.16.0-73-powerpc-smp-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "block-modules-3.16.0-73-powerpc64-smp-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "crypto-modules-3.16.0-73-generic-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "crypto-modules-3.16.0-73-generic-lpae-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "crypto-modules-3.16.0-73-powerpc-e500mc-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "crypto-modules-3.16.0-73-powerpc-smp-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "crypto-modules-3.16.0-73-powerpc64-smp-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "fat-modules-3.16.0-73-generic-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "fat-modules-3.16.0-73-generic-lpae-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "fat-modules-3.16.0-73-powerpc-e500mc-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "fat-modules-3.16.0-73-powerpc-smp-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "fat-modules-3.16.0-73-powerpc64-smp-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "fb-modules-3.16.0-73-generic-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "firewire-core-modules-3.16.0-73-generic-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "firewire-core-modules-3.16.0-73-powerpc-e500mc-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "firewire-core-modules-3.16.0-73-powerpc-smp-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "firewire-core-modules-3.16.0-73-powerpc64-smp-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "floppy-modules-3.16.0-73-generic-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "floppy-modules-3.16.0-73-powerpc-e500mc-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "floppy-modules-3.16.0-73-powerpc-smp-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "floppy-modules-3.16.0-73-powerpc64-smp-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "fs-core-modules-3.16.0-73-generic-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "fs-core-modules-3.16.0-73-generic-lpae-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "fs-core-modules-3.16.0-73-powerpc-e500mc-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "fs-core-modules-3.16.0-73-powerpc-smp-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "fs-core-modules-3.16.0-73-powerpc64-smp-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "fs-secondary-modules-3.16.0-73-generic-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "fs-secondary-modules-3.16.0-73-generic-lpae-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "fs-secondary-modules-3.16.0-73-powerpc-e500mc-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "fs-secondary-modules-3.16.0-73-powerpc-smp-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "fs-secondary-modules-3.16.0-73-powerpc64-smp-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "input-modules-3.16.0-73-generic-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "input-modules-3.16.0-73-generic-lpae-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "input-modules-3.16.0-73-powerpc-e500mc-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "input-modules-3.16.0-73-powerpc-smp-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "input-modules-3.16.0-73-powerpc64-smp-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "ipmi-modules-3.16.0-73-generic-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "ipmi-modules-3.16.0-73-generic-lpae-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "ipmi-modules-3.16.0-73-powerpc-e500mc-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "ipmi-modules-3.16.0-73-powerpc-smp-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "ipmi-modules-3.16.0-73-powerpc64-smp-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "irda-modules-3.16.0-73-generic-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "irda-modules-3.16.0-73-generic-lpae-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "irda-modules-3.16.0-73-powerpc-e500mc-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "irda-modules-3.16.0-73-powerpc-smp-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "irda-modules-3.16.0-73-powerpc64-smp-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "kernel-image-3.16.0-73-generic-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "kernel-image-3.16.0-73-generic-lpae-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "kernel-image-3.16.0-73-powerpc-e500mc-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "kernel-image-3.16.0-73-powerpc-smp-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "kernel-image-3.16.0-73-powerpc64-smp-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "linux-cloud-tools-3.16.0-73-generic",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "linux-cloud-tools-3.16.0-73-lowlatency",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "linux-headers-3.16.0-73",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "linux-headers-3.16.0-73-generic",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "linux-headers-3.16.0-73-generic-lpae",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "linux-headers-3.16.0-73-lowlatency",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "linux-headers-3.16.0-73-powerpc-e500mc",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "linux-headers-3.16.0-73-powerpc-smp",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "linux-headers-3.16.0-73-powerpc64-emb",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "linux-headers-3.16.0-73-powerpc64-smp",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "linux-image-3.16.0-73-generic",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "linux-image-3.16.0-73-generic-lpae",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "linux-image-3.16.0-73-lowlatency",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "linux-image-3.16.0-73-powerpc-e500mc",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "linux-image-3.16.0-73-powerpc-smp",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "linux-image-3.16.0-73-powerpc64-emb",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "linux-image-3.16.0-73-powerpc64-smp",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "linux-image-extra-3.16.0-73-generic",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "linux-lts-utopic-cloud-tools-3.16.0-73",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "linux-lts-utopic-tools-3.16.0-73",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "linux-lts-utopic-udebs-generic",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "linux-lts-utopic-udebs-generic-lpae",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "linux-lts-utopic-udebs-powerpc-e500mc",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "linux-lts-utopic-udebs-powerpc-smp",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "linux-lts-utopic-udebs-powerpc64-smp",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "linux-tools-3.16.0-73-generic",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "linux-tools-3.16.0-73-generic-lpae",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "linux-tools-3.16.0-73-lowlatency",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "linux-tools-3.16.0-73-powerpc-e500mc",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "linux-tools-3.16.0-73-powerpc-smp",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "linux-tools-3.16.0-73-powerpc64-emb",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "linux-tools-3.16.0-73-powerpc64-smp",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "md-modules-3.16.0-73-generic-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "md-modules-3.16.0-73-generic-lpae-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "md-modules-3.16.0-73-powerpc-e500mc-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "md-modules-3.16.0-73-powerpc-smp-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "md-modules-3.16.0-73-powerpc64-smp-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "message-modules-3.16.0-73-generic-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "message-modules-3.16.0-73-powerpc-e500mc-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "message-modules-3.16.0-73-powerpc-smp-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "message-modules-3.16.0-73-powerpc64-smp-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "mouse-modules-3.16.0-73-generic-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "mouse-modules-3.16.0-73-generic-lpae-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "mouse-modules-3.16.0-73-powerpc-e500mc-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "mouse-modules-3.16.0-73-powerpc-smp-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "mouse-modules-3.16.0-73-powerpc64-smp-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "multipath-modules-3.16.0-73-generic-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "multipath-modules-3.16.0-73-generic-lpae-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "multipath-modules-3.16.0-73-powerpc-e500mc-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "multipath-modules-3.16.0-73-powerpc-smp-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "multipath-modules-3.16.0-73-powerpc64-smp-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "nfs-modules-3.16.0-73-generic-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "nfs-modules-3.16.0-73-generic-lpae-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "nfs-modules-3.16.0-73-powerpc-e500mc-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "nfs-modules-3.16.0-73-powerpc-smp-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "nfs-modules-3.16.0-73-powerpc64-smp-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "nic-modules-3.16.0-73-generic-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "nic-modules-3.16.0-73-generic-lpae-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "nic-modules-3.16.0-73-powerpc-e500mc-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "nic-modules-3.16.0-73-powerpc-smp-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "nic-modules-3.16.0-73-powerpc64-smp-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "nic-pcmcia-modules-3.16.0-73-generic-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "nic-shared-modules-3.16.0-73-generic-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "nic-shared-modules-3.16.0-73-generic-lpae-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "nic-shared-modules-3.16.0-73-powerpc-e500mc-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "nic-shared-modules-3.16.0-73-powerpc-smp-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "nic-shared-modules-3.16.0-73-powerpc64-smp-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "nic-usb-modules-3.16.0-73-generic-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "nic-usb-modules-3.16.0-73-generic-lpae-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "nic-usb-modules-3.16.0-73-powerpc-e500mc-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "nic-usb-modules-3.16.0-73-powerpc-smp-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "nic-usb-modules-3.16.0-73-powerpc64-smp-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "parport-modules-3.16.0-73-generic-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "parport-modules-3.16.0-73-generic-lpae-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "parport-modules-3.16.0-73-powerpc-e500mc-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "parport-modules-3.16.0-73-powerpc-smp-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "parport-modules-3.16.0-73-powerpc64-smp-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "pata-modules-3.16.0-73-generic-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "pata-modules-3.16.0-73-powerpc-e500mc-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "pata-modules-3.16.0-73-powerpc-smp-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "pata-modules-3.16.0-73-powerpc64-smp-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "pcmcia-modules-3.16.0-73-generic-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "pcmcia-storage-modules-3.16.0-73-generic-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "plip-modules-3.16.0-73-generic-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "plip-modules-3.16.0-73-generic-lpae-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "plip-modules-3.16.0-73-powerpc-e500mc-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "plip-modules-3.16.0-73-powerpc-smp-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "plip-modules-3.16.0-73-powerpc64-smp-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "ppp-modules-3.16.0-73-generic-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "ppp-modules-3.16.0-73-generic-lpae-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "ppp-modules-3.16.0-73-powerpc-e500mc-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "ppp-modules-3.16.0-73-powerpc-smp-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "ppp-modules-3.16.0-73-powerpc64-smp-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "sata-modules-3.16.0-73-generic-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "sata-modules-3.16.0-73-generic-lpae-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "sata-modules-3.16.0-73-powerpc-e500mc-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "sata-modules-3.16.0-73-powerpc-smp-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "sata-modules-3.16.0-73-powerpc64-smp-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "scsi-modules-3.16.0-73-generic-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "scsi-modules-3.16.0-73-generic-lpae-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "scsi-modules-3.16.0-73-powerpc-e500mc-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "scsi-modules-3.16.0-73-powerpc-smp-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "scsi-modules-3.16.0-73-powerpc64-smp-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "serial-modules-3.16.0-73-generic-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "speakup-modules-3.16.0-73-generic-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "speakup-modules-3.16.0-73-generic-lpae-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "speakup-modules-3.16.0-73-powerpc-e500mc-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "speakup-modules-3.16.0-73-powerpc-smp-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "speakup-modules-3.16.0-73-powerpc64-smp-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "squashfs-modules-3.16.0-73-generic-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "squashfs-modules-3.16.0-73-generic-lpae-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "squashfs-modules-3.16.0-73-powerpc-e500mc-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "squashfs-modules-3.16.0-73-powerpc-smp-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "squashfs-modules-3.16.0-73-powerpc64-smp-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "storage-core-modules-3.16.0-73-generic-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "storage-core-modules-3.16.0-73-generic-lpae-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "storage-core-modules-3.16.0-73-powerpc-e500mc-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "storage-core-modules-3.16.0-73-powerpc-smp-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "storage-core-modules-3.16.0-73-powerpc64-smp-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "usb-modules-3.16.0-73-generic-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "usb-modules-3.16.0-73-generic-lpae-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "usb-modules-3.16.0-73-powerpc-e500mc-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "usb-modules-3.16.0-73-powerpc-smp-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "usb-modules-3.16.0-73-powerpc64-smp-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "virtio-modules-3.16.0-73-generic-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "virtio-modules-3.16.0-73-powerpc-e500mc-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "virtio-modules-3.16.0-73-powerpc-smp-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "virtio-modules-3.16.0-73-powerpc64-smp-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "vlan-modules-3.16.0-73-generic-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "vlan-modules-3.16.0-73-generic-lpae-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "vlan-modules-3.16.0-73-powerpc-e500mc-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "vlan-modules-3.16.0-73-powerpc-smp-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          },
          {
            "binary_name": "vlan-modules-3.16.0-73-powerpc64-smp-di",
            "binary_version": "3.16.0-73.95~14.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:14.04:LTS",
        "name": "linux-lts-utopic",
        "purl": "pkg:deb/ubuntu/linux-lts-utopic@3.16.0-73.95~14.04.1?arch=source\u0026distro=trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.16.0-73.95~14.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "3.16.0-25.33~14.04.2",
        "3.16.0-26.35~14.04.1",
        "3.16.0-28.37~14.04.1",
        "3.16.0-28.38~14.04.1",
        "3.16.0-29.39~14.04.1",
        "3.16.0-30.40~14.04.1",
        "3.16.0-31.41~14.04.1",
        "3.16.0-31.43~14.04.1",
        "3.16.0-33.44~14.04.1",
        "3.16.0-34.45~14.04.1",
        "3.16.0-34.47~14.04.1",
        "3.16.0-36.48~14.04.1",
        "3.16.0-37.49~14.04.1",
        "3.16.0-37.51~14.04.1",
        "3.16.0-38.52~14.04.1",
        "3.16.0-39.53~14.04.1",
        "3.16.0-40.54~14.04.1",
        "3.16.0-41.55~14.04.1",
        "3.16.0-41.57~14.04.1",
        "3.16.0-43.58~14.04.1",
        "3.16.0-44.59~14.04.1",
        "3.16.0-45.60~14.04.1",
        "3.16.0-46.62~14.04.1",
        "3.16.0-48.64~14.04.1",
        "3.16.0-49.65~14.04.1",
        "3.16.0-50.66~14.04.1",
        "3.16.0-50.67~14.04.1",
        "3.16.0-51.69~14.04.1",
        "3.16.0-52.71~14.04.1",
        "3.16.0-53.72~14.04.1",
        "3.16.0-55.74~14.04.1",
        "3.16.0-56.75~14.04.1",
        "3.16.0-57.77~14.04.1",
        "3.16.0-59.79~14.04.1",
        "3.16.0-60.80~14.04.1",
        "3.16.0-62.82~14.04.1",
        "3.16.0-62.83~14.04.1",
        "3.16.0-67.87~14.04.1",
        "3.16.0-69.89~14.04.1",
        "3.16.0-70.90~14.04.1",
        "3.16.0-71.91~14.04.1",
        "3.16.0-71.92~14.04.1"
      ]
    }
  ],
  "aliases": [],
  "details": "Justin Yackoski discovered that the Atheros L2 Ethernet Driver in the Linux\nkernel incorrectly enables scatter/gather I/O. A remote attacker could use\nthis to obtain potentially sensitive information from kernel memory.\n(CVE-2016-2117)\n\nJann Horn discovered that eCryptfs improperly attempted to use the mmap()\nhandler of a lower filesystem that did not implement one, causing a\nrecursive page fault to occur. A local unprivileged attacker could use to\ncause a denial of service (system crash) or possibly execute arbitrary code\nwith administrative privileges. (CVE-2016-1583)\n\nJason A. Donenfeld discovered multiple out-of-bounds reads in the OZMO USB\nover wifi device drivers in the Linux kernel. A remote attacker could use\nthis to cause a denial of service (system crash) or obtain potentially\nsensitive information from kernel memory. (CVE-2015-4004)\n\nRalf Spenneberg discovered that the Linux kernel\u0027s GTCO digitizer USB\ndevice driver did not properly validate endpoint descriptors. An attacker\nwith physical access could use this to cause a denial of service (system\ncrash). (CVE-2016-2187)\n\nSergej Schumilo, Hendrik Schwartke, and Ralf Spenneberg discovered that the\nMCT USB RS232 Converter device driver in the Linux kernel did not properly\nvalidate USB device descriptors. An attacker with physical access could use\nthis to cause a denial of service (system crash). (CVE-2016-3136)\n\nSergej Schumilo, Hendrik Schwartke, and Ralf Spenneberg discovered that the\nCypress M8 USB device driver in the Linux kernel did not properly validate\nUSB device descriptors. An attacker with physical access could use this to\ncause a denial of service (system crash). (CVE-2016-3137)\n\nSergej Schumilo, Hendrik Schwartke, and Ralf Spenneberg discovered that the\nLinux kernel\u0027s USB driver for Digi AccelePort serial converters did not\nproperly validate USB device descriptors. An attacker with physical access\ncould use this to cause a denial of service (system crash). (CVE-2016-3140)\n\nHector Marco and Ismael Ripoll discovered that the Linux kernel would\nimproperly disable Address Space Layout Randomization (ASLR) for x86\nprocesses running in 32 bit mode if stack-consumption resource limits were\ndisabled. A local attacker could use this to make it easier to exploit an\nexisting vulnerability in a setuid/setgid program. (CVE-2016-3672)\n\nIt was discovered that the Linux kernel\u0027s USB driver for IMS Passenger\nControl Unit devices did not properly validate the device\u0027s interfaces. An\nattacker with physical access could use this to cause a denial of service\n(system crash). (CVE-2016-3689)\n\nAndrey Konovalov discovered that the CDC Network Control Model USB driver\nin the Linux kernel did not cancel work events queued if a later error\noccurred, resulting in a use-after-free. An attacker with physical access\ncould use this to cause a denial of service (system crash). (CVE-2016-3951)\n\nIt was discovered that an out-of-bounds write could occur when handling\nincoming packets in the USB/IP implementation in the Linux kernel. A remote\nattacker could use this to cause a denial of service (system crash) or\npossibly execute arbitrary code. (CVE-2016-3955)\n\nKangjie Lu discovered an information leak in the ANSI/IEEE 802.2 LLC type 2\nSupport implementations in the Linux kernel. A local attacker could use\nthis to obtain potentially sensitive information from kernel memory.\n(CVE-2016-4485)\n\nKangjie Lu discovered an information leak in the routing netlink socket\ninterface (rtnetlink) implementation in the Linux kernel. A local attacker\ncould use this to obtain potentially sensitive information from kernel\nmemory. (CVE-2016-4486)\n\nIt was discovered that in some situations the Linux kernel did not handle\npropagated mounts correctly. A local unprivileged attacker could use this\nto cause a denial of service (system crash). (CVE-2016-4581)\n",
  "id": "USN-3000-1",
  "modified": "2026-02-10T04:41:00Z",
  "published": "2016-06-10T05:36:46Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-3000-1"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2015-4004"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2016-1583"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2016-2117"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2016-2187"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2016-3136"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2016-3137"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2016-3140"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2016-3672"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2016-3689"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2016-3951"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2016-3955"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2016-4485"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2016-4486"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2016-4581"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "summary": "linux-lts-utopic vulnerabilities",
  "upstream": [
    "UBUNTU-CVE-2015-4004",
    "UBUNTU-CVE-2016-1583",
    "UBUNTU-CVE-2016-2117",
    "UBUNTU-CVE-2016-2187",
    "UBUNTU-CVE-2016-3136",
    "UBUNTU-CVE-2016-3137",
    "UBUNTU-CVE-2016-3140",
    "UBUNTU-CVE-2016-3672",
    "UBUNTU-CVE-2016-3689",
    "UBUNTU-CVE-2016-3951",
    "UBUNTU-CVE-2016-3955",
    "UBUNTU-CVE-2016-4485",
    "UBUNTU-CVE-2016-4486",
    "UBUNTU-CVE-2016-4581"
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.