UBUNTU-CVE-2016-8405

Description

An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-31651010.

CVSS Metrics

• v3.0•MEDIUM•Score: 4.7CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

Affected Systems

• ubuntu•linux

  < 3.13.0-126.175 | < 4.4.0-67.88

• ubuntu•linux-aws

  < 4.4.0-1009.18

• ubuntu•linux-azure-fde

  all

• ubuntu•linux-gke

  all

• ubuntu•linux-hwe

  < 4.10.0-32.36~16.04.1

• ubuntu•linux-intel-iot-realtime

  all

• ubuntu•linux-lts-xenial

  < 4.4.0-67.88~14.04.1

• ubuntu•linux-raspi-realtime

  all

• ubuntu•linux-raspi2

  < 4.4.0-1048.55 | all

• ubuntu•linux-realtime

  all

• ubuntu•linux-riscv

  all | all

• ubuntu•linux-snapdragon

  < 4.4.0-1051.55

References (6)

• https://ubuntu.com/security/CVE-2016-8405
• https://marc.info/?l=linux-kernel&m=148365805203921&w=2
• https://ubuntu.com/security/notices/USN-3361-1
• https://ubuntu.com/security/notices/USN-3381-1
• https://ubuntu.com/security/notices/USN-3381-2
• https://www.cve.org/CVERecord?id=CVE-2016-8405