{ "schema_version": "1.4.0", "id": "GHSA-wj4h-397w-w967", "modified": "2022-05-17T03:41:04Z", "published": "2022-05-17T03:41:04Z", "aliases": [ "CVE-2016-4580" ], "details": "The x25_negotiate_facilities function in net/x25/x25_facilities.c in the Linux kernel before 4.5.5 does not properly initialize a certain data structure, which allows attackers to obtain sensitive information from kernel stack memory via an X.25 Call Request.", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4580" }, { "type": "WEB", "url": "https://github.com/torvalds/linux/commit/79e48650320e6fba48369fccf13fd045315b19b8" }, { "type": "WEB", "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=79e48650320e6fba48369fccf13fd045315b19b8" }, { "type": "WEB", "url": "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html" }, { "type": "WEB", "url": "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html" }, { "type": "WEB", "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html" }, { "type": "WEB", "url": "http://www.debian.org/security/2016/dsa-3607" }, { "type": "WEB", "url": "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.5" }, { "type": "WEB", "url": "http://www.openwall.com/lists/oss-security/2016/05/10/12" }, { "type": "WEB", "url": "http://www.securityfocus.com/bid/90528" }, { "type": "WEB", "url": "http://www.ubuntu.com/usn/USN-3016-1" }, { "type": "WEB", "url": "http://www.ubuntu.com/usn/USN-3016-2" }, { "type": "WEB", "url": "http://www.ubuntu.com/usn/USN-3016-3" }, { "type": "WEB", "url": "http://www.ubuntu.com/usn/USN-3016-4" }, { "type": "WEB", "url": "http://www.ubuntu.com/usn/USN-3017-1" }, { "type": "WEB", "url": "http://www.ubuntu.com/usn/USN-3017-2" }, { "type": "WEB", "url": "http://www.ubuntu.com/usn/USN-3017-3" }, { "type": "WEB", "url": "http://www.ubuntu.com/usn/USN-3018-1" }, { "type": "WEB", "url": "http://www.ubuntu.com/usn/USN-3018-2" }, { "type": "WEB", "url": "http://www.ubuntu.com/usn/USN-3019-1" }, { "type": "WEB", "url": "http://www.ubuntu.com/usn/USN-3020-1" }, { "type": "WEB", "url": "http://www.ubuntu.com/usn/USN-3021-1" }, { "type": "WEB", "url": "http://www.ubuntu.com/usn/USN-3021-2" } ], "database_specific": { "cwe_ids": [ "CWE-200" ], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2016-05-23T10:59:00Z" } }