CVE-2016-4997
CVE-2016-4997
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
The compat IPT_SO_SET_REPLACE and IP6T_SO_SET_REPLACE setsockopt implementations in the netfilter subsystem in the Linux kernel before 4.6.3 allow local users to gain privileges or cause a denial of service (memory corruption) by leveraging in-container root access to provide a crafted offset value that triggers an unintended decrement.
CVSS 7.8 · High · EPSS 5.7% · Public exploit · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
linux Debian:12
- Affected ranges
- ECOSYSTEM: < 4.6.2-2
Update to 4.6.2-2
linux Debian:13
- Affected ranges
- ECOSYSTEM: < 4.6.2-2
Update to 4.6.2-2
linux Debian:14
- Affected ranges
- ECOSYSTEM: < 4.6.2-2
Update to 4.6.2-2
linux Ubuntu:14.04:LTS
- Versions
- 3.11.0-12.19
- 3.12.0-1.3
- 3.12.0-2.5
- 3.12.0-2.7
- 3.12.0-3.8
- 3.12.0-3.9
- 3.12.0-4.10
- 3.12.0-4.12
- 3.12.0-5.13
- 3.12.0-7.15
- 3.13.0-1.16
- 3.13.0-2.17
- 3.13.0-3.18
- 3.13.0-4.19
- 3.13.0-5.20
- 3.13.0-6.23
- 3.13.0-7.25
- 3.13.0-7.26
- 3.13.0-8.27
- 3.13.0-8.28
- 3.13.0-10.30
- 3.13.0-11.31
- 3.13.0-12.32
- 3.13.0-13.33
- 3.13.0-14.34
- 3.13.0-15.35
- 3.13.0-16.36
- 3.13.0-17.37
- 3.13.0-18.38
- 3.13.0-19.39
- 3.13.0-19.40
- 3.13.0-20.42
- 3.13.0-21.43
- 3.13.0-22.44
- 3.13.0-23.45
- 3.13.0-24.46
- 3.13.0-24.47
- 3.13.0-27.50
- 3.13.0-29.53
- 3.13.0-30.54
- 3.13.0-30.55
- 3.13.0-32.57
- 3.13.0-33.58
- 3.13.0-34.60
- 3.13.0-35.62
- 3.13.0-36.63
- 3.13.0-37.64
- 3.13.0-39.66
- 3.13.0-40.69
- 3.13.0-41.70
- 3.13.0-43.72
- 3.13.0-44.73
- 3.13.0-45.74
- 3.13.0-46.75
- 3.13.0-46.76
- 3.13.0-46.77
- 3.13.0-46.79
- 3.13.0-48.80
- 3.13.0-49.81
- 3.13.0-49.83
- 3.13.0-51.84
- 3.13.0-52.85
- 3.13.0-52.86
- 3.13.0-53.88
- 3.13.0-53.89
- 3.13.0-54.91
- 3.13.0-55.92
- 3.13.0-55.94
- 3.13.0-57.95
- 3.13.0-58.97
- 3.13.0-59.98
- 3.13.0-61.100
- 3.13.0-62.102
- 3.13.0-63.103
- 3.13.0-65.105
- 3.13.0-65.106
- 3.13.0-66.108
- 3.13.0-67.110
- 3.13.0-68.111
- 3.13.0-70.113
- 3.13.0-71.114
- 3.13.0-73.116
- 3.13.0-74.118
- 3.13.0-76.120
- 3.13.0-77.121
- 3.13.0-79.123
- 3.13.0-83.127
- 3.13.0-85.129
- 3.13.0-86.130
- 3.13.0-86.131
- 3.13.0-87.133
- 3.13.0-88.135
- Affected ranges
- ECOSYSTEM: < 3.13.0-91.138
Update to 3.13.0-91.138
linux-lts-utopic Ubuntu:14.04:LTS
- Versions
- 3.16.0-25.33~14.04.2
- 3.16.0-26.35~14.04.1
- 3.16.0-28.37~14.04.1
- 3.16.0-28.38~14.04.1
- 3.16.0-29.39~14.04.1
- 3.16.0-30.40~14.04.1
- 3.16.0-31.41~14.04.1
- 3.16.0-31.43~14.04.1
- 3.16.0-33.44~14.04.1
- 3.16.0-34.45~14.04.1
- 3.16.0-34.47~14.04.1
- 3.16.0-36.48~14.04.1
- 3.16.0-37.49~14.04.1
- 3.16.0-37.51~14.04.1
- 3.16.0-38.52~14.04.1
- 3.16.0-39.53~14.04.1
- 3.16.0-40.54~14.04.1
- 3.16.0-41.55~14.04.1
- 3.16.0-41.57~14.04.1
- 3.16.0-43.58~14.04.1
- 3.16.0-44.59~14.04.1
- 3.16.0-45.60~14.04.1
- 3.16.0-46.62~14.04.1
- 3.16.0-48.64~14.04.1
- 3.16.0-49.65~14.04.1
- 3.16.0-50.66~14.04.1
- 3.16.0-50.67~14.04.1
- 3.16.0-51.69~14.04.1
- 3.16.0-52.71~14.04.1
- 3.16.0-53.72~14.04.1
- 3.16.0-55.74~14.04.1
- 3.16.0-56.75~14.04.1
- 3.16.0-57.77~14.04.1
- 3.16.0-59.79~14.04.1
- 3.16.0-60.80~14.04.1
- 3.16.0-62.82~14.04.1
- 3.16.0-62.83~14.04.1
- 3.16.0-67.87~14.04.1
- 3.16.0-69.89~14.04.1
- 3.16.0-70.90~14.04.1
- 3.16.0-71.91~14.04.1
- 3.16.0-71.92~14.04.1
- 3.16.0-73.95~14.04.1
- Affected ranges
- ECOSYSTEM: < 3.16.0-76.98~14.04.1
Update to 3.16.0-76.98~14.04.1
linux-lts-vivid Ubuntu:14.04:LTS
- Versions
- 3.19.0-18.18~14.04.1
- 3.19.0-20.20~14.04.1
- 3.19.0-21.21~14.04.1
- 3.19.0-22.22~14.04.1
- 3.19.0-23.24~14.04.1
- 3.19.0-25.26~14.04.1
- 3.19.0-26.28~14.04.1
- 3.19.0-28.30~14.04.1
- 3.19.0-30.33~14.04.1
- 3.19.0-30.34~14.04.1
- 3.19.0-31.36~14.04.1
- 3.19.0-32.37~14.04.1
- 3.19.0-33.38~14.04.1
- 3.19.0-37.42~14.04.1
- 3.19.0-39.44~14.04.1
- 3.19.0-41.46~14.04.2
- 3.19.0-42.48~14.04.1
- 3.19.0-43.49~14.04.1
- 3.19.0-47.53~14.04.1
- 3.19.0-49.55~14.04.1
- 3.19.0-51.57~14.04.1
- 3.19.0-51.58~14.04.1
- 3.19.0-56.62~14.04.1
- 3.19.0-58.64~14.04.1
- 3.19.0-59.65~14.04.1
- 3.19.0-59.66~14.04.1
- 3.19.0-61.69~14.04.1
- Affected ranges
- ECOSYSTEM: < 3.19.0-64.72~14.04.1
Update to 3.19.0-64.72~14.04.1
linux-lts-wily Ubuntu:14.04:LTS
- Versions
- 4.2.0-18.22~14.04.1
- 4.2.0-19.23~14.04.1
- 4.2.0-21.25~14.04.1
- 4.2.0-22.27~14.04.1
- 4.2.0-23.28~14.04.1
- 4.2.0-25.30~14.04.1
- 4.2.0-27.32~14.04.1
- 4.2.0-30.35~14.04.1
- 4.2.0-30.36~14.04.1
- 4.2.0-34.39~14.04.1
- 4.2.0-35.40~14.04.1
- 4.2.0-36.41~14.04.1
- 4.2.0-36.42~14.04.1
- 4.2.0-38.45~14.04.1
- Affected ranges
- ECOSYSTEM: < 4.2.0-41.48~14.04.1
Update to 4.2.0-41.48~14.04.1
linux-lts-xenial Ubuntu:14.04:LTS
- Versions
- 4.4.0-13.29~14.04.1
- 4.4.0-14.30~14.04.2
- 4.4.0-15.31~14.04.1
- 4.4.0-18.34~14.04.1
- 4.4.0-21.37~14.04.1
- 4.4.0-22.39~14.04.1
- 4.4.0-22.40~14.04.1
- 4.4.0-24.43~14.04.1
- Affected ranges
- ECOSYSTEM: < 4.4.0-28.47~14.04.1
Update to 4.4.0-28.47~14.04.1
linux Ubuntu:16.04:LTS
- Versions
- 4.2.0-16.19
- 4.2.0-17.21
- 4.2.0-19.23
- 4.3.0-1.10
- 4.3.0-2.11
- 4.3.0-5.16
- 4.3.0-6.17
- 4.3.0-7.18
- 4.4.0-2.16
- 4.4.0-4.19
- 4.4.0-6.21
- 4.4.0-7.22
- 4.4.0-8.23
- 4.4.0-9.24
- 4.4.0-10.25
- 4.4.0-11.26
- 4.4.0-12.28
- 4.4.0-13.29
- 4.4.0-14.30
- 4.4.0-15.31
- 4.4.0-16.32
- 4.4.0-17.33
- 4.4.0-18.34
- 4.4.0-21.37
- 4.4.0-22.39
- 4.4.0-22.40
- 4.4.0-24.43
- Affected ranges
- ECOSYSTEM: < 4.4.0-28.47
Update to 4.4.0-28.47
linux-raspi2 Ubuntu:16.04:LTS
- Versions
- 4.2.0-1013.19
- 4.2.0-1014.21
- 4.3.0-1006.6
- 4.4.0-1003.4
- 4.4.0-1004.5
- 4.4.0-1009.10
- 4.4.0-1010.12
- 4.4.0-1010.13
- 4.4.0-1012.16
- Affected ranges
- ECOSYSTEM: < 4.4.0-1016.22
Update to 4.4.0-1016.22
linux-snapdragon Ubuntu:16.04:LTS
- Versions
- 4.4.0-1012.12
- 4.4.0-1013.14
- 4.4.0-1013.15
- 4.4.0-1015.18
- Affected ranges
- ECOSYSTEM: < 4.4.0-1019.22
Update to 4.4.0-1019.22
Original sources
- http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00053.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00060.html
- http://www.ubuntu.com/usn/USN-3017-1
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html
- http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html
- http://www.ubuntu.com/usn/USN-3017-3
- http://rhn.redhat.com/errata/RHSA-2016-1847.html
- https://bugzilla.redhat.com/show_bug.cgi?id=1349722
- http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html
- http://www.ubuntu.com/usn/USN-3018-2
- http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00048.html
- http://www.ubuntu.com/usn/USN-3017-2
- http://rhn.redhat.com/errata/RHSA-2016-1875.html
- http://www.ubuntu.com/usn/USN-3019-1
- http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00027.html
- http://www.debian.org/security/2016/dsa-3607
- http://www.ubuntu.com/usn/USN-3016-2
- http://www.ubuntu.com/usn/USN-3016-1
- http://www.openwall.com/lists/oss-security/2016/06/24/5
- http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00054.html
- http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00051.html
- https://www.exploit-db.com/exploits/40435/
- https://nvd.nist.gov/vuln/detail/CVE-2016-4997