CVE-2016-4580 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	7.5 HIGH	NETWORK	LOW	NONE	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
mitre	CNA	---				---
CVE	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 64%

Vendor	Product	Version
linux	linux_kernel	𝑥 ≤ 4.5.4
canonical	ubuntu_linux	12.04
canonical	ubuntu_linux	14.04
canonical	ubuntu_linux	15.10
canonical	ubuntu_linux	16.04

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

linux

bullseye	5.10.223-1 fixed
bullseye (security)	5.10.226-1 fixed
bookworm	6.1.106-3 fixed
bookworm (security)	6.1.112-1 fixed
sid	6.11.5-1 fixed
trixie	6.11.5-1 fixed

Ubuntu Releases

Ubuntu Product

Codename

linux

zesty	not-affected
yakkety	not-affected
xenial	Fixed 4.4.0-28.47 released
wily	Fixed 4.2.0-41.48 released
trusty	Fixed 3.13.0-91.138 released
precise	Fixed 3.2.0-105.146 released

linux-armadaxp

zesty	dne
yakkety	dne
xenial	dne
wily	dne
trusty	dne
precise	Fixed 3.2.0-1668.93 released

linux-aws

zesty	dne
yakkety	dne
xenial	not-affected
trusty	not-affected
precise	dne

linux-flo

zesty	dne
yakkety	ignored
xenial	ignored
wily	ignored
trusty	dne
precise	dne

linux-gke

zesty	dne
yakkety	dne
xenial	not-affected
trusty	dne
precise	dne

linux-goldfish

zesty	ignored
yakkety	ignored
xenial	ignored
wily	ignored
trusty	dne
precise	dne

linux-grouper

zesty	dne
yakkety	dne
xenial	dne
wily	dne
trusty	dne
precise	dne

linux-hwe

zesty	dne
yakkety	dne
xenial	not-affected
trusty	dne
precise	dne

linux-hwe-edge

zesty	dne
yakkety	dne
xenial	not-affected
trusty	dne
precise	dne

linux-linaro-omap

zesty	dne
yakkety	dne
xenial	dne
wily	dne
trusty	dne
precise	ignored

linux-linaro-shared

zesty	dne
yakkety	dne
xenial	dne
wily	dne
trusty	dne
precise	ignored

linux-linaro-vexpress

zesty	dne
yakkety	dne
xenial	dne
wily	dne
trusty	dne
precise	ignored

linux-lts-quantal

zesty	dne
yakkety	dne
xenial	dne
wily	dne
trusty	dne
precise	ignored

linux-lts-raring

zesty	dne
yakkety	dne
xenial	dne
wily	dne
trusty	dne
precise	ignored

linux-lts-saucy

zesty	dne
yakkety	dne
xenial	dne
wily	dne
trusty	dne
precise	ignored

linux-lts-trusty

zesty	dne
yakkety	dne
xenial	dne
wily	dne
trusty	dne
precise	Fixed 3.13.0-91.138~precise1 released

linux-lts-utopic

zesty	dne
yakkety	dne
xenial	dne
wily	dne
trusty	Fixed 3.16.0-76.98~14.04.1 released
precise	dne

linux-lts-vivid

zesty	dne
yakkety	dne
xenial	dne
wily	dne
trusty	Fixed 3.19.0-64.72~14.04.1 released
precise	dne

linux-lts-wily

zesty	dne
yakkety	dne
xenial	dne
wily	dne
trusty	Fixed 4.2.0-41.48~14.04.1 released
precise	dne

linux-lts-xenial

zesty	dne
yakkety	dne
xenial	dne
wily	dne
trusty	Fixed 4.4.0-28.47~14.04.1 released
precise	dne

linux-maguro

zesty	dne
yakkety	dne
xenial	dne
wily	dne
trusty	dne
precise	dne

linux-mako

zesty	dne
yakkety	ignored
xenial	ignored
wily	ignored
trusty	dne
precise	dne

linux-manta

zesty	dne
yakkety	dne
xenial	dne
wily	ignored
trusty	dne
precise	dne

linux-qcm-msm

zesty	dne
yakkety	dne
xenial	dne
wily	dne
trusty	dne
precise	ignored

linux-raspi2

zesty	not-affected
yakkety	not-affected
xenial	Fixed 4.4.0-1016.22 released
wily	Fixed 4.2.0-1033.43 released
trusty	dne
precise	dne

linux-snapdragon

zesty	not-affected
yakkety	not-affected
xenial	Fixed 4.4.0-1019.22 released
wily	dne
trusty	dne
precise	dne

linux-ti-omap4

zesty	dne
yakkety	dne
xenial	dne
wily	dne
trusty	dne
precise	Fixed 3.2.0-1483.110 released

Common Weakness Enumeration

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=79e48650320e6fba48369fccf13fd045315b19b8

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html

http://www.debian.org/security/2016/dsa-3607

http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.5

http://www.openwall.com/lists/oss-security/2016/05/10/12

http://www.securityfocus.com/bid/90528

http://www.ubuntu.com/usn/USN-3016-1

http://www.ubuntu.com/usn/USN-3016-2

http://www.ubuntu.com/usn/USN-3016-3

http://www.ubuntu.com/usn/USN-3016-4

http://www.ubuntu.com/usn/USN-3017-1

http://www.ubuntu.com/usn/USN-3017-2

http://www.ubuntu.com/usn/USN-3017-3

http://www.ubuntu.com/usn/USN-3018-1

http://www.ubuntu.com/usn/USN-3018-2

http://www.ubuntu.com/usn/USN-3019-1

http://www.ubuntu.com/usn/USN-3020-1

http://www.ubuntu.com/usn/USN-3021-1

http://www.ubuntu.com/usn/USN-3021-2

https://github.com/torvalds/linux/commit/79e48650320e6fba48369fccf13fd045315b19b8