USN-3016-3

Source
https://ubuntu.com/security/notices/USN-3016-3
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-3016-3.json
JSON Data
https://api.osv.dev/v1/vulns/USN-3016-3
Related
Published
2016-06-27T20:01:57.894504Z
Modified
2016-06-27T20:01:57.894504Z
Summary
linux-snapdragon vulnerabilities
Details

Jesse Hertz and Tim Newsham discovered that the Linux netfilter implementation did not correctly perform validation when handling 32 bit compatibility IPTSOSET_REPLACE events on 64 bit platforms. A local unprivileged attacker could use this to cause a denial of service (system crash) or execute arbitrary code with administrative privileges. (CVE-2016-4997)

Kangjie Lu discovered an information leak in the core USB implementation in the Linux kernel. A local attacker could use this to obtain potentially sensitive information from kernel memory. (CVE-2016-4482)

Kangjie Lu discovered an information leak in the timer handling implementation in the Advanced Linux Sound Architecture (ALSA) subsystem of the Linux kernel. A local attacker could use this to obtain potentially sensitive information from kernel memory. (CVE-2016-4569, CVE-2016-4578)

Kangjie Lu discovered an information leak in the X.25 Call Request handling in the Linux kernel. A local attacker could use this to obtain potentially sensitive information from kernel memory. (CVE-2016-4580)

It was discovered that an information leak exists in the Rock Ridge implementation in the Linux kernel. A local attacker who is able to mount a malicious iso9660 file system image could exploit this flaw to obtain potentially sensitive information from kernel memory. (CVE-2016-4913)

Baozeng Ding discovered that the Transparent Inter-process Communication (TIPC) implementation in the Linux kernel did not verify socket existence before use in some situations. A local attacker could use this to cause a denial of service (system crash). (CVE-2016-4951)

Jesse Hertz and Tim Newsham discovered that the Linux netfilter implementation did not correctly perform validation when handling IPTSOSET_REPLACE events. A local unprivileged attacker could use this to cause a denial of service (system crash) or obtain potentially sensitive information from kernel memory. (CVE-2016-4998)

References

Affected packages

Ubuntu:16.04:LTS / linux-snapdragon

Package

Name
linux-snapdragon
Purl
pkg:deb/ubuntu/linux-snapdragon?arch=src?distro=xenial

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.4.0-1019.22

Affected versions

4.*

4.4.0-1012.12
4.4.0-1013.14
4.4.0-1013.15
4.4.0-1015.18

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_version": "4.4.0-1019.22",
            "binary_name": "linux-headers-4.4.0-1019-snapdragon"
        },
        {
            "binary_version": "4.4.0-1019.22",
            "binary_name": "linux-image-4.4.0-1019-snapdragon"
        },
        {
            "binary_version": "4.4.0-1019.22",
            "binary_name": "linux-image-4.4.0-1019-snapdragon-dbgsym"
        },
        {
            "binary_version": "4.4.0-1019.22",
            "binary_name": "linux-snapdragon-headers-4.4.0-1019"
        },
        {
            "binary_version": "4.4.0-1019.22",
            "binary_name": "linux-snapdragon-tools-4.4.0-1019"
        },
        {
            "binary_version": "4.4.0-1019.22",
            "binary_name": "linux-snapdragon-tools-4.4.0-1019-dbgsym"
        },
        {
            "binary_version": "4.4.0-1019.22",
            "binary_name": "linux-tools-4.4.0-1019-snapdragon"
        }
    ]
}