CVE-2016-5243 in Kernel
Résumé (Anglaise)
The tipc_nl_compat_link_dump function in net/tipc/netlink_compat.c in the Linux kernel through 4.6.3 does not properly copy a certain string, which allows local users to obtain sensitive information from kernel stack memory by reading a Netlink message.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Réserver
03/06/2016
Divulgation
27/06/2016
Statut
Confirmé
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 88375 | Linux Kernel Netlink Message netlink_compat.c tipc_nl_compat_link_dump Memory divulgation d'information | 200 | Non défini | Correctif officiel | CVE-2016-5243 |