The mpipowm function in lib/mpi/mpi-pow.c in the Linux kernel through 4.8.11 does not ensure that memory is allocated for limb data, which allows local users to cause a denial of service (stack memory corruption and panic) via an addkey system call for an RSA key with a zero exponent.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-8650.json"
[
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@f5527fffff3f002b0a6b376163613b82f69de073",
"digest": {
"line_hashes": [
"4907316655427699571983674599597368106",
"122729448390513446482940916719989748101",
"13896684673734226818327380804514573500",
"118080962755809557939040264370389824122",
"303612281421747559469505800399840127790"
],
"threshold": 0.9
},
"id": "CVE-2016-8650-6019ff6f",
"deprecated": false,
"target": {
"file": "lib/mpi/mpi-pow.c"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@f5527fffff3f002b0a6b376163613b82f69de073",
"digest": {
"function_hash": "301464560231751825809338158822391370994",
"length": 4040.0
},
"id": "CVE-2016-8650-89c72b84",
"deprecated": false,
"target": {
"file": "lib/mpi/mpi-pow.c",
"function": "mpi_powm"
}
}
]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-8650.json"
[
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/f5527fffff3f002b0a6b376163613b82f69de073",
"digest": {
"line_hashes": [
"4907316655427699571983674599597368106",
"122729448390513446482940916719989748101",
"13896684673734226818327380804514573500",
"118080962755809557939040264370389824122",
"303612281421747559469505800399840127790"
],
"threshold": 0.9
},
"id": "CVE-2016-8650-51d41916",
"deprecated": false,
"target": {
"file": "lib/mpi/mpi-pow.c"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/f5527fffff3f002b0a6b376163613b82f69de073",
"digest": {
"function_hash": "301464560231751825809338158822391370994",
"length": 4040.0
},
"id": "CVE-2016-8650-ffa7a592",
"deprecated": false,
"target": {
"file": "lib/mpi/mpi-pow.c",
"function": "mpi_powm"
}
}
]