CVE-2016-1583: canonical ubuntu_linux

Modified

AliasesSUSE-SU-2016:1596-1RHSA-2017:2760UBUNTU-CVE-2016-1583+3 more

Published 27-06-2016Last modified 05-08-2024

Vulnerability summary

CVE-2016-1583 is a high (CVSS 7.8) vulnerability in canonical ubuntu_linux. EPSS estimates a 1.39% chance of exploitation in the next 30 days, higher than 72.4% of scored vulnerabilities. 1 public exploit is recorded.

Priority

Prioritiseweaponized exploit

Weaponized exploit (exploit-database, 21-06-2016)

Source freshness unavailable

How is this decided?

CVSS score

7.8/10

010

High · v3.1 (NVD)

EPSS score

1.39%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits1exploit-database

Timeline

27-06-2016
PublishedVulnerability first disclosed.
05-08-2024
Last modifiedVulnerability information updated.

Description

The ecryptfs_privileged_open function in fs/ecryptfs/kthread.c in the Linux kernel before 4.6.3 allows local users to gain privileges or cause a denial of service (stack memory consumption) via vectors involving crafted mmap calls for /proc pathnames, leading to recursive pagefault handling.

CVSS metrics

6 scores · 4 sources · 3 versions

v3.17.8v3.08.1v2.07.2

EPSS trend

Probability

1.39%

Chance of exploitation in the next 30 days

Percentile

72%

Versus all other CVEs

30-day change

No change 0.00 pp

From 1.39% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

1 found

exploit-databaselocallinuxVerified
Linux Kernel - 'ecryptfs' '/proc/$pid/environ' Local Privilege Escalation
Maturity: weaponized

Weaknesses

CWE · root cause

CWE-119Improper Restriction of Operations within the Bounds of a Memory BufferThe product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.

Affected systems

Version check

Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.

Redhat22 products

kernel< 0:2.6.32-573.47.1.el6
kernel-abi-whitelists< 0:2.6.32-573.47.1.el6
kernel-bootwrapper< 0:2.6.32-573.47.1.el6
kernel-debug< 0:2.6.32-573.47.1.el6
kernel-debug-debuginfo< 0:2.6.32-573.47.1.el6

Show all 22

Suse17 products

kernel-default&distro=SUSE Linux Enterprise Desktop 12< 3.12.55-52.45.1
kernel-default&distro=SUSE Linux Enterprise Server 12< 3.12.55-52.45.1
kernel-default&distro=SUSE Linux Enterprise Server for SAP Applications 12< 3.12.55-52.45.1
kernel-default&distro=SUSE Linux Enterprise Workstation Extension 12< 3.12.55-52.45.1
kernel-docs&distro=SUSE Linux Enterprise Software Development Kit 12< 3.12.55-52.45.4

Show all 17

Novell7 products

suse_linux_enterprise_debuginfo11.0:sp4
suse_linux_enterprise_desktop12.0 | 12.0:sp1
suse_linux_enterprise_live_patching12.0
suse_linux_enterprise_module_for_public_cloud12
suse_linux_enterprise_serverEOL11.0:extra | 11.0:sp4 | 12.0 | 12.0:sp1

Show all 7

Ubuntu7 products

linux< 4.4.0-24.43 | < 3.13.0-88.135
linux-lts-utopic< 3.16.0-73.95~14.04.1
linux-lts-vivid< 3.19.0-61.69~14.04.1
linux-lts-wily< 4.2.0-38.45~14.04.1
linux-lts-xenial< 4.4.0-24.43~14.04.1

Show all 7

Debian2 products

linux< 4.6.2-1
debian_linuxEOL8.0

Canonical1 product

ubuntu_linuxEOL12.04 | 14.04 | 15.10 | 16.04

Linux1 product

linux_kernel≥ 2.6.19, < 3.18.54 | ≥ 3.19, < 4.4.14 | ≥ 4.5, < 4.6.3

7 vendors · 57 products

References

73 links

www.ubuntu.com/usn/USN-3006-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
www.ubuntu.com/usn/USN-3004-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2016-08/msg00022.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
github.com/torvalds/linux/commit/f5364c150aa645b3d7daa21b5c0b9feaa1c9cd6dX Refsource CONFIRMVendor Advisory
rhn.redhat.com/errata/RHSA-2016-2766.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
www.ubuntu.com/usn/USN-3001-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.6.3X Refsource CONFIRMRelease NotesVendor Advisory
lists.opensuse.org/opensuse-security-announce/2016-06/msg00056.htmlVendor AdvisoryX Refsource SUSEThird Party Advisory
git.kernel.org/cgit/…X Refsource CONFIRMVendor Advisory
lists.opensuse.org/opensuse-security-announce/2016-08/msg00008.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory

Show all 73 references

www.exploit-db.com/exploits/39992/ExploitX Refsource EXPLOIT DBThird Party AdvisoryVDB Entry
lists.opensuse.org/opensuse-security-announce/2016-08/msg00003.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
www.ubuntu.com/usn/USN-3005-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
bugs.chromium.org/p/project-zero/issues/detail?id=836X Refsource MISCVendor Advisory
lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
www.securityfocus.com/bid/91157VDB EntryX Refsource BIDThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
www.ubuntu.com/usn/USN-2999-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
git.kernel.org/cgit/…X Refsource CONFIRMVendor Advisory
lists.opensuse.org/opensuse-security-announce/2016-08/msg00019.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
www.openwall.com/lists/oss-security/2016/06/10/8Mailing ListX Refsource MLISTThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2016-08/msg00026.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
www.ubuntu.com/usn/USN-2997-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
www.ubuntu.com/usn/USN-3000-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
github.com/torvalds/linux/commit/f0fe970df3838c202ef6c07a4c2b36838ef0a88bX Refsource MISCThird Party Advisory
www.debian.org/security/2016/dsa-3607Vendor AdvisoryX Refsource DEBIANThird Party Advisory
www.securitytracker.com/id/1036763VDB EntryX Refsource SECTRACKThird Party Advisory
github.com/torvalds/linux/commit/2f36db71009304b3f0b95afacd8eba1f9f046b87X Refsource CONFIRMVendor Advisory
www.ubuntu.com/usn/USN-3002-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
www.ubuntu.com/usn/USN-2996-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.htmlVendor AdvisoryX Refsource SUSEThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2016-08/msg00021.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2016-06/msg00027.htmlVendor AdvisoryX Refsource SUSEThird Party Advisory
access.redhat.com/errata/RHSA-2017:2760Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
lists.opensuse.org/opensuse-security-announce/2016-08/msg00018.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2016-08/msg00020.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
www.ubuntu.com/usn/USN-3007-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2016-08/msg00014.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
rhn.redhat.com/errata/RHSA-2016-2124.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
www.ubuntu.com/usn/USN-3003-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2016-08/msg00009.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
www.openwall.com/lists/oss-security/2016/06/22/1Mailing ListX Refsource MLISTThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2016-08/msg00016.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
bugzilla.redhat.com/show_bug.cgi?id=1344721X Refsource CONFIRMIssue TrackingVDB EntryREPORT
www.ubuntu.com/usn/USN-2998-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
packetstormsecurity.com/files/137560/Linux-ecryptfs-Stack-Overflow.htmlX Refsource MISCThird Party AdvisoryVDB Entry
www.ubuntu.com/usn/USN-3008-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
www.suse.com/support/update/announcement/2016/suse-su-20161596-1/Advisory
bugzilla.suse.com/983143REPORT
www.suse.com/security/cve/CVE-2016-1583WEB
access.redhat.com/security/updates/classification/ARTICLE
security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2760.jsonAdvisory
access.redhat.com/security/cve/CVE-2016-1583REPORT
www.cve.org/CVERecord?id=CVE-2016-1583AdvisoryREPORT
nvd.nist.gov/vuln/detail/CVE-2016-1583Advisory
ubuntu.com/security/CVE-2016-1583REPORT
ubuntu.com/security/notices/USN-2996-1Advisory
ubuntu.com/security/notices/USN-2997-1Advisory
ubuntu.com/security/notices/USN-2998-1Advisory
ubuntu.com/security/notices/USN-2999-1Advisory
ubuntu.com/security/notices/USN-3000-1Advisory
ubuntu.com/security/notices/USN-3001-1Advisory
ubuntu.com/security/notices/USN-3002-1Advisory
ubuntu.com/security/notices/USN-3003-1Advisory
ubuntu.com/security/notices/USN-3004-1Advisory
ubuntu.com/security/notices/USN-3005-1Advisory
ubuntu.com/security/notices/USN-3006-1Advisory
ubuntu.com/security/notices/USN-3007-1Advisory
ubuntu.com/security/notices/USN-3008-1Advisory
security-tracker.debian.org/tracker/CVE-2016-1583Advisory