CVE-2016-4913

Published: May 23, 2016Modified: May 6, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

The get_rock_ridge_filename function in fs/isofs/rock.c in the Linux kernel before 4.5.5 mishandles NM (aka alternate name) entries containing \0 characters, which allows local users to obtain sensitive information from kernel memory or possibly have unspecified other impact via a crafted isofs filesystem.

Affected (18)

Products: Canonical: Ubuntu Linux · Linux: Linux Kernel · Oracle: Linux · +1 more

Show all products

Canonical: Ubuntu Linux · Linux: Linux Kernel · Oracle: Linux · Novell: Suse Linux Enterprise Debuginfo, Suse Linux Enterprise Server, Suse Linux Enterprise Software Development Kit

1 product

1 product

1 product

3 products

Suse Linux Enterprise Debuginfo

Suse Linux Enterprise Server

Suse Linux Enterprise Software Development Kit

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 12.04
Canonical Ubuntu Linux	Version 14.04
Canonical Ubuntu Linux	Version 15.10
Canonical Ubuntu Linux	Version 16.04

Configuration B

9 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Before 3.2.81
Linux Linux Kernel	From 3.11 to 3.12.60
Linux Linux Kernel	From 3.13 to 3.14.70
Linux Linux Kernel	From 3.15 to 3.16.36
Linux Linux Kernel	From 3.17 to 3.18.34
Linux Linux Kernel	From 3.19 to 4.1.25
Linux Linux Kernel	From 3.3 to 3.10.102
Linux Linux Kernel	From 4.2 to 4.4.11
Linux Linux Kernel	From 4.5 to 4.5.5

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Oracle Linux	Version 6

Configuration D

4 vulnerable

Vulnerable Software	Affected Versions
Novell Suse Linux Enterprise Debuginfo	Version 11.0 sp4
Novell Suse Linux Enterprise Server	Version 11.0 extra
Novell Suse Linux Enterprise Server	Version 11.0 sp4
Novell Suse Linux Enterprise Software Development Kit	Version 11.0 sp4

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (54)

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=99d825822eade8d827a1817357cbf3f889a552d6

Source: security@debian.org

Vendor Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html

Source: security@debian.org

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html

Source: security@debian.org

Mailing ListThird Party Advisory

http://www.debian.org/security/2016/dsa-3607

Source: security@debian.org

Third Party Advisory

http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.5

Source: security@debian.org

Vendor Advisory

http://www.openwall.com/lists/oss-security/2016/05/18/3

Source: security@debian.org

Mailing ListPatchThird Party Advisory

http://www.openwall.com/lists/oss-security/2016/05/18/5

Source: security@debian.org

Mailing ListPatchThird Party Advisory

http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html

Source: security@debian.org

Third Party Advisory

http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html

Source: security@debian.org

Third Party Advisory

http://www.securityfocus.com/bid/90730

Source: security@debian.org

Third Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/USN-3016-1

Source: security@debian.org

Third Party Advisory

http://www.ubuntu.com/usn/USN-3016-2

Source: security@debian.org

Third Party Advisory

http://www.ubuntu.com/usn/USN-3016-3

Source: security@debian.org

Third Party Advisory

http://www.ubuntu.com/usn/USN-3016-4

Source: security@debian.org

Third Party Advisory

http://www.ubuntu.com/usn/USN-3017-1

Source: security@debian.org

Third Party Advisory

http://www.ubuntu.com/usn/USN-3017-2

Source: security@debian.org

Third Party Advisory

http://www.ubuntu.com/usn/USN-3017-3

Source: security@debian.org

Third Party Advisory

http://www.ubuntu.com/usn/USN-3018-1

Source: security@debian.org

Third Party Advisory

http://www.ubuntu.com/usn/USN-3018-2

Source: security@debian.org

Third Party Advisory

http://www.ubuntu.com/usn/USN-3019-1

Source: security@debian.org

Third Party Advisory

http://www.ubuntu.com/usn/USN-3020-1

Source: security@debian.org

Third Party Advisory

http://www.ubuntu.com/usn/USN-3021-1

Source: security@debian.org

Third Party Advisory

http://www.ubuntu.com/usn/USN-3021-2

Source: security@debian.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:3083

Source: security@debian.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:3096

Source: security@debian.org

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=1337528

Source: security@debian.org

Issue TrackingThird Party AdvisoryVDB Entry

https://github.com/torvalds/linux/commit/99d825822eade8d827a1817357cbf3f889a552d6

Source: security@debian.org

Vendor Advisory

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=99d825822eade8d827a1817357cbf3f889a552d6