CVE-2016-8633

drivers/firewire/net.c in the Linux kernel before 4.8.7, in certain unusual hardware configurations, allows remote attackers to execute arbitrary code via crafted fragmented packets.

Score

CVSS 3.0 6.8 Medium

Status

Modified - secalert@redhat.com

Published

2016-11-28

Last modified

2024-08-06

Weaknesses

CWE-119, CWE-284

Affected products

• Linux Kernel (Linux)

References

• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=667121ace9dbafb368618dbabcf07901c962ddac
• http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.7
• http://www.openwall.com/lists/oss-security/2016/11/06/1
• http://www.securityfocus.com/bid/94149
• https://access.redhat.com/errata/RHSA-2018:0676
• https://access.redhat.com/errata/RHSA-2018:1062
• https://access.redhat.com/errata/RHSA-2019:1170
• https://access.redhat.com/errata/RHSA-2019:1190
• https://bugzilla.redhat.com/show_bug.cgi?id=1391490
• https://eyalitkin.wordpress.com/2016/11/06/cve-publication-cve-2016-8633/
• https://github.com/torvalds/linux/commit/667121ace9dbafb368618dbabcf07901c962ddac