Linux Kernel CVE-2016-8633 Local Buffer Overflow Vulnerability

The Linux kernel is prone to a local buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data.

Local attackers can exploit this issue to run arbitrary code. Failed exploit attempts will likely cause denial-of-service conditions.

Information

Bugtraq ID: 94149
Class: Boundary Condition Error
CVE: CVE-2016-8633

Remote: No
Local: Yes
Published: Nov 06 2016 12:00AM
Credit: Adam Mariš
Vulnerable: SuSE Linux Enterprise Server for SAP 12
SuSE Linux Enterprise Server 12-LTSS
SuSE Linux Enterprise Server 11 SP2 LTSS
SuSE Linux Enterprise Module for Public Cloud 12
SuSE Linux Enterprise Debuginfo 11 SP2
Oracle Enterprise Linux 6.2
Oracle Enterprise Linux 6
Linux kernel 4.8

Not Vulnerable:

References:

• firewire: net: guard against rx buffer overflows (Gitkernel)
  
• Linux kernel Homepage (kernel.org)
  
• Bug 1391490 - (CVE-2016-8633) CVE-2016-8633 kernel: Buffer overflow in firewire (Red Hat)
  
• Re: [engineering.redhat.com #426293] CVE Request - firewire driver RCE - linux 4 (Seclists.org)
  

Source: www.securityfocus.com