CVE-2016-7796: novell suse_linux_enterprise_desktop Improper Input Validation
Vulnerability summary
CVE-2016-7796 is a medium (CVSS 5.5) Improper Input Validation vulnerability in novell suse_linux_enterprise_desktop. EPSS estimates a 0.85% chance of exploitation in the next 30 days, higher than 57.6% of scored vulnerabilities. 2 public exploits are recorded.
Timeline
- 13-10-2016PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
The manager_dispatch_notify_fd function in systemd allows local users to cause a denial of service (system hang) via a zero-length message received over a notify socket, which causes an error to be returned and the notification handler to be disabled.
CVSS metrics
5 scores · 4 sources · 2 versions- OSV · Red hatEcosystem advisory · calculated6.8MediumCVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:HDiffers
- OSV · UbuntuEcosystem advisory · calculated5.5MediumCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated5.5MediumCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
0.85%
Chance of exploitation in the next 30 days
Percentile
58%
Versus all other CVEs
30-day change
0.00 pp
From 0.85% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
2 foundSystemd
Maturity: poc
Exploit Reference (agwa.name)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Redhat15 products
- enterprise_linux_desktop7.0
- enterprise_linux_hpc_node7.0
- enterprise_linux_server7.0
- enterprise_linux_workstation7.0
- libgudev1< 0:219-19.el7 | < 0:208-20.el7_1.9 | < 0:208-20.ael7b_1.9
Suse6 products
- systemd&distro=SUSE Linux Enterprise Desktop 12 SP1< 210-114.1
- systemd&distro=SUSE Linux Enterprise Server 12 SP1< 210-114.1
- systemd&distro=SUSE Linux Enterprise Server 12-LTSS< 210-70.58.1
- systemd&distro=SUSE Linux Enterprise Server for SAP Applications 12< 210-70.58.1
- systemd&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1< 210-114.1
Novell4 products
- suse_linux_enterprise_desktop12:sp1
- suse_linux_enterprise_serverEOL12.0 | 12.0:sp1
- suse_linux_enterprise_server_for_sap12.0
- suse_linux_enterprise_software_development_kit12.0:sp1
Debian1 product
- systemd< 231-9 | < 44-11+deb7u5
Systemd_project1 product
- systemd209 | 213 | 214 | 229
Ubuntu1 product
- systemd< 229-4ubuntu11
6 vendors · 28 products
References
85 links- www.agwa.name/blog/post/how_to_crash_systemd_in_one_tweetX Refsource MISCExploitTechnical DescriptionThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2016-10/msg00015.htmlVendor AdvisoryX Refsource SUSEThird Party Advisory
- bugzilla.redhat.com/show_bug.cgi?id=1381911X Refsource CONFIRMIssue TrackingThird Party AdvisoryVDB EntryREPORT
- lists.opensuse.org/opensuse-security-announce/2016-10/msg00016.htmlVendor AdvisoryX Refsource SUSEThird Party Advisory
Show all 85 references
- bugzilla.suse.com/954374REPORT
- bugzilla.suse.com/970293REPORT
- bugzilla.suse.com/982210REPORT
- bugzilla.suse.com/982211REPORT
- bugzilla.suse.com/982251REPORT
- bugzilla.suse.com/987173REPORT
- bugzilla.suse.com/987857REPORT
- bugzilla.suse.com/990074REPORT
- bugzilla.suse.com/996269REPORT
