http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=23c8a812dc3c621009e4f0e5342aa4e2ede1ceaa

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00003.html

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00008.html

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00009.html

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00014.html

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00015.html

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00016.html

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00017.html

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00018.html

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00019.html

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00020.html

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00021.html

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00022.html

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00023.html

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00026.html

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html

http://rhn.redhat.com/errata/RHSA-2016-1033.html

http://rhn.redhat.com/errata/RHSA-2016-1051.html

http://rhn.redhat.com/errata/RHSA-2016-1055.html

http://source.android.com/security/bulletin/2016-10-01.html

http://www.openwall.com/lists/oss-security/2016/05/12/9

http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html

http://www.securityfocus.com/bid/90626

http://www.ubuntu.com/usn/USN-2979-4

https://bugzilla.redhat.com/show_bug.cgi?id=1300257

https://github.com/torvalds/linux/commit/23c8a812dc3c621009e4f0e5342aa4e2ede1ceaa

https://h20565.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158555

A flaw was found in the way the Linux kernel's ASN.1 DER decoder processed certain certificate files with tags of indefinite length. A local, unprivileged user could use a specially crafted X.509 certificate DER file to crash the system or, potentially, escalate their privileges on the system.

Integer overflow in lib/asn1_decoder.c in the Linux kernel before 4.6 allows local users to gain privileges via crafted ASN.1 data.

Red Hat, Inc. (AV:L/AC:L/Au:N/C:C/I:C/A:C)

https://access.redhat.com/errata/RHSA-2016:1033 [No Types Assigned]

https://access.redhat.com/errata/RHSA-2016:1051 [No Types Assigned]

https://access.redhat.com/errata/RHSA-2016:1055 [No Types Assigned]

https://access.redhat.com/security/cve/CVE-2016-0758 [No Types Assigned]

Integer overflow in lib/asn1_decoder.c in the Linux kernel before 4.6 allows local users to gain privileges via crafted ASN.1 data.

A flaw was found in the way the Linux kernel's ASN.1 DER decoder processed certain certificate files with tags of indefinite length. A local, unprivileged user could use a specially crafted X.509 certificate DER file to crash the system or, potentially, escalate their privileges on the system.

Red Hat, Inc. (AV:L/AC:L/Au:N/C:C/I:C/A:C)

https://access.redhat.com/errata/RHSA-2016:1033 [No Types Assigned]

https://access.redhat.com/errata/RHSA-2016:1051 [No Types Assigned]

https://access.redhat.com/errata/RHSA-2016:1055 [No Types Assigned]

https://access.redhat.com/security/cve/CVE-2016-0758 [No Types Assigned]

NIST AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NIST AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

OR
     *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions up to (including) 4.5.0

OR
     *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 3.7 up to (excluding) 3.12.60
     *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 3.13 up to (excluding) 3.16.36
     *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 3.17 up to (excluding) 3.18.54
     *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 3.19 up to (excluding) 4.4.21

OR
     *cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html Mailing List, Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html Mailing List, Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html Mailing List, Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html Mailing List, Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00003.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00003.html Mailing List, Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html Mailing List, Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00008.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00008.html Mailing List, Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00009.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00009.html Mailing List, Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00014.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00014.html Mailing List, Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00015.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00015.html Mailing List, Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00016.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00016.html Mailing List, Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00017.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00017.html Mailing List, Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00018.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00018.html Mailing List, Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00019.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00019.html Mailing List, Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00020.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00020.html Mailing List, Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00021.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00021.html Mailing List, Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00022.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00022.html Mailing List, Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00023.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00023.html Mailing List, Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00026.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00026.html Mailing List, Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html Mailing List, Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html Mailing List, Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-1033.html No Types Assigned

http://rhn.redhat.com/errata/RHSA-2016-1033.html Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-1051.html No Types Assigned

http://rhn.redhat.com/errata/RHSA-2016-1051.html Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-1055.html No Types Assigned

http://rhn.redhat.com/errata/RHSA-2016-1055.html Third Party Advisory

http://source.android.com/security/bulletin/2016-10-01.html No Types Assigned

http://source.android.com/security/bulletin/2016-10-01.html Third Party Advisory

http://www.openwall.com/lists/oss-security/2016/05/12/9 No Types Assigned

http://www.openwall.com/lists/oss-security/2016/05/12/9 Mailing List, Third Party Advisory

http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html No Types Assigned

http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html Third Party Advisory

http://www.securityfocus.com/bid/90626 No Types Assigned

http://www.securityfocus.com/bid/90626 Third Party Advisory, VDB Entry

http://www.ubuntu.com/usn/USN-2979-4 No Types Assigned

http://www.ubuntu.com/usn/USN-2979-4 Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=1300257 No Types Assigned

https://bugzilla.redhat.com/show_bug.cgi?id=1300257 Issue Tracking, Third Party Advisory

https://github.com/torvalds/linux/commit/23c8a812dc3c621009e4f0e5342aa4e2ede1ceaa Vendor Advisory

https://github.com/torvalds/linux/commit/23c8a812dc3c621009e4f0e5342aa4e2ede1ceaa Third Party Advisory

https://h20565.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158555 No Types Assigned

https://h20565.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158555 Third Party Advisory

<a href="http://cwe.mitre.org/data/definitions/190.html">CWE-190: Integer Overflow or Wraparound</a>

CWE-190: Integer Overflow or Wraparound

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00003.html [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00008.html [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00009.html [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00014.html [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00015.html [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00016.html [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00017.html [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00018.html [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00019.html [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00020.html [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00021.html [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00022.html [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00023.html [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00026.html [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html [No Types Assigned]

http://www.securityfocus.com/bid/90626 [No Types Assigned]

http://source.android.com/security/bulletin/2016-10-01.html

http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html

http://rhn.redhat.com/errata/RHSA-2016-1051.html

http://rhn.redhat.com/errata/RHSA-2016-1055.html

http://www.ubuntu.com/usn/USN-2979-4

https://h20565.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158555

Configuration 1
     OR
          *cpe:2.3:o:linux:linux_kernel:4.5.0:*:*:*:*:*:*:* (and previous)

Configuration 1
     OR
          *cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:*:*:*:*:*:*:*
          *cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*
          *cpe:2.3:o:redhat:enterprise_linux_hpc_node_eus:7.2:*:*:*:*:*:*:*
          *cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*
          *cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
          *cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0:*:*:*:*:*:*:*
          *cpe:2.3:o:redhat:enterpr

http://rhn.redhat.com/errata/RHSA-2016-1033.html

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

(AV:L/AC:L/Au:N/C:C/I:C/A:C)

NVD-CWE-Other

Configuration 1
     OR
          *cpe:2.3:o:linux:linux_kernel:4.5.0:*:*:*:*:*:*:* (and previous)

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=23c8a812dc3c621009e4f0e5342aa4e2ede1ceaa No Types Assigned

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=23c8a812dc3c621009e4f0e5342aa4e2ede1ceaa Advisory

https://github.com/torvalds/linux/commit/23c8a812dc3c621009e4f0e5342aa4e2ede1ceaa No Types Assigned

https://github.com/torvalds/linux/commit/23c8a812dc3c621009e4f0e5342aa4e2ede1ceaa Advisory

<a href="http://cwe.mitre.org/data/definitions/190.html">CWE-190: Integer Overflow or Wraparound</a>