UBUNTU-CVE-2016-8399

Description

An elevation of privilege vulnerability in the kernel networking subsystem could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Moderate because it first requires compromising a privileged process and current compiler optimizations restrict access to the vulnerable code. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-31349935.

CVSS Metrics

• v3.1•HIGH•Score: 7CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
• v3.0•HIGH•Score: 7CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected Systems

• ubuntu•linux

  < 4.4.0-62.83

• ubuntu•linux-aws

  < 4.4.0-1003.12

• ubuntu•linux-hwe

  < 4.8.0-39.42~16.04.1

• ubuntu•linux-lts-xenial

  < 4.4.0-62.83~14.04.1

• ubuntu•linux-raspi2

  < 4.4.0-1042.49

• ubuntu•linux-snapdragon

  < 4.4.0-1046.50

References (6)

• https://ubuntu.com/security/CVE-2016-8399
• https://ubuntu.com/security/notices/USN-3189-1
• https://ubuntu.com/security/notices/USN-3189-2
• https://ubuntu.com/security/notices/USN-3190-1
• https://ubuntu.com/security/notices/USN-3190-2
• https://www.cve.org/CVERecord?id=CVE-2016-8399