UBUNTU-CVE-2016-5344

Source
https://ubuntu.com/security/CVE-2016-5344
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2016/UBUNTU-CVE-2016-5344.json
JSON Data
https://api.osv.dev/v1/vulns/UBUNTU-CVE-2016-5344
Upstream
  • CVE-2016-5344
Withdrawn
2025-07-18T16:43:33Z
Published
2016-08-30T17:59:00Z
Modified
2025-07-16T07:34:45.588321Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
  • 9.8 (Critical) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
  • Ubuntu - medium
Summary
[none]
Details

Multiple integer overflows in the MDSS driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allow attackers to cause a denial of service or possibly have unspecified other impact via a large size value, related to mdsscompatutils.c, mdssfb.c, and mdssrotator.c.

References

Affected packages

Ubuntu:14.04:LTS / linux-azure

Package

Name
linux-azure
Purl
pkg:deb/ubuntu/linux-azure@4.15.0-1023.24~14.04.1?arch=source&distro=trusty

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.15.0-1023.24~14.04.1

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "linux-azure-cloud-tools-4.15.0-1023",
            "binary_version": "4.15.0-1023.24~14.04.1"
        },
        {
            "binary_name": "linux-azure-cloud-tools-4.15.0-1023-dbgsym",
            "binary_version": "4.15.0-1023.24~14.04.1"
        },
        {
            "binary_name": "linux-azure-headers-4.15.0-1023",
            "binary_version": "4.15.0-1023.24~14.04.1"
        },
        {
            "binary_name": "linux-azure-tools-4.15.0-1023",
            "binary_version": "4.15.0-1023.24~14.04.1"
        },
        {
            "binary_name": "linux-azure-tools-4.15.0-1023-dbgsym",
            "binary_version": "4.15.0-1023.24~14.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-4.15.0-1023-azure",
            "binary_version": "4.15.0-1023.24~14.04.1"
        },
        {
            "binary_name": "linux-headers-4.15.0-1023-azure",
            "binary_version": "4.15.0-1023.24~14.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-4.15.0-1023-azure",
            "binary_version": "4.15.0-1023.24~14.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-4.15.0-1023-azure-dbgsym",
            "binary_version": "4.15.0-1023.24~14.04.1"
        },
        {
            "binary_name": "linux-modules-4.15.0-1023-azure",
            "binary_version": "4.15.0-1023.24~14.04.1"
        },
        {
            "binary_name": "linux-modules-extra-4.15.0-1023-azure",
            "binary_version": "4.15.0-1023.24~14.04.1"
        },
        {
            "binary_name": "linux-tools-4.15.0-1023-azure",
            "binary_version": "4.15.0-1023.24~14.04.1"
        }
    ]
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2016/UBUNTU-CVE-2016-5344.json"