OR
     *cpe:2.3:o:novell:suse_linux_enterprise_software_development_kit:12.0:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:*:*:*:*:*:*:*

OR
     *cpe:2.3:o:novell:suse_linux_enterprise_software_development_kit:12.0:sp1:*:*:*:*:*:*

OR
     *cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:sp1:*:*:*:*:*:*

Red Hat, Inc. (AV:L/AC:L/Au:N/C:C/I:C/A:C)

Red Hat, Inc. AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

A flaw was discovered in processing setsockopt for 32 bit processes on 64 bit systems. This flaw will allow attackers to alter arbitrary kernel memory when unloading a kernel module. This action is usually restricted to root-privileged users but can also be leveraged if the kernel is compiled with CONFIG_USER_NS and CONFIG_NET_NS and the user is granted elevated privileges.

The compat IPT_SO_SET_REPLACE and IP6T_SO_SET_REPLACE setsockopt implementations in the netfilter subsystem in the Linux kernel before 4.6.3 allow local users to gain privileges or cause a denial of service (memory corruption) by leveraging in-container root access to provide a crafted offset value that triggers an unintended decrement.

https://access.redhat.com/errata/RHSA-2016:1847 [No Types Assigned]

https://access.redhat.com/errata/RHSA-2016:1875 [No Types Assigned]

https://access.redhat.com/errata/RHSA-2016:1883 [No Types Assigned]

https://access.redhat.com/security/cve/CVE-2016-4997 [No Types Assigned]

Red Hat, Inc. (AV:L/AC:L/Au:N/C:C/I:C/A:C)

Red Hat, Inc. AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

The compat IPT_SO_SET_REPLACE and IP6T_SO_SET_REPLACE setsockopt implementations in the netfilter subsystem in the Linux kernel before 4.6.3 allow local users to gain privileges or cause a denial of service (memory corruption) by leveraging in-container root access to provide a crafted offset value that triggers an unintended decrement.

A flaw was discovered in processing setsockopt for 32 bit processes on 64 bit systems. This flaw will allow attackers to alter arbitrary kernel memory when unloading a kernel module. This action is usually restricted to root-privileged users but can also be leveraged if the kernel is compiled with CONFIG_USER_NS and CONFIG_NET_NS and the user is granted elevated privileges.

https://access.redhat.com/errata/RHSA-2016:1847 [No Types Assigned]

https://access.redhat.com/errata/RHSA-2016:1875 [No Types Assigned]

https://access.redhat.com/errata/RHSA-2016:1883 [No Types Assigned]

https://access.redhat.com/security/cve/CVE-2016-4997 [No Types Assigned]

OR
     *cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

OR
     *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions up to (including) 4.6.2

OR
     *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 2.6.17 up to (excluding) 3.2.80
     *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 3.3 up to (excluding) 3.10.103
     *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 3.11 up to (excluding) 3.12.62
     *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 3.13 up to (excluding) 3.14.73
     *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from

NIST AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NIST AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html Mailing List, Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00027.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00027.html Mailing List, Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html Mailing List, Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00048.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00048.html Mailing List, Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00050.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00050.html Mailing List, Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00051.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00051.html Mailing List, Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00052.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00052.html Mailing List, Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00053.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00053.html Mailing List, Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00054.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00054.html Mailing List, Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html Mailing List, Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-1847.html No Types Assigned

http://rhn.redhat.com/errata/RHSA-2016-1847.html Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-1875.html No Types Assigned

http://rhn.redhat.com/errata/RHSA-2016-1875.html Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-1883.html No Types Assigned

http://rhn.redhat.com/errata/RHSA-2016-1883.html Third Party Advisory

http://www.debian.org/security/2016/dsa-3607 No Types Assigned

http://www.debian.org/security/2016/dsa-3607 Third Party Advisory

http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.6.3 No Types Assigned

http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.6.3 Vendor Advisory

http://www.openwall.com/lists/oss-security/2016/06/24/5 No Types Assigned

http://www.openwall.com/lists/oss-security/2016/06/24/5 Mailing List, Third Party Advisory

http://www.openwall.com/lists/oss-security/2016/09/29/10 Exploit, Third Party Advisory

http://www.openwall.com/lists/oss-security/2016/09/29/10 Exploit, Mailing List, Third Party Advisory

http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html No Types Assigned

http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html Third Party Advisory

http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html No Types Assigned

http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html Third Party Advisory

http://www.securityfocus.com/bid/91451 No Types Assigned

http://www.securityfocus.com/bid/91451 Third Party Advisory, VDB Entry

http://www.securitytracker.com/id/1036171 No Types Assigned

http://www.securitytracker.com/id/1036171 Third Party Advisory, VDB Entry

https://bugzilla.redhat.com/show_bug.cgi?id=1349722 Issue Tracking

https://bugzilla.redhat.com/show_bug.cgi?id=1349722 Issue Tracking, Third Party Advisory

https://github.com/torvalds/linux/commit/ce683e5f9d045e5d67d1312a42b359cb2ab2a13c Patch

https://github.com/torvalds/linux/commit/ce683e5f9d045e5d67d1312a42b359cb2ab2a13c Patch, Third Party Advisory

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05347541 No Types Assigned

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05347541 Third Party Advisory

https://www.exploit-db.com/exploits/40435/ No Types Assigned

https://www.exploit-db.com/exploits/40435/ Third Party Advisory, VDB Entry

https://www.exploit-db.com/exploits/40489/ No Types Assigned

https://www.exploit-db.com/exploits/40489/ Third Party Advisory, VDB Entry

OR
     *cpe:2.3:o:oracle:linux:7.0:*:*:*:*:*:*:*

OR
     *cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*

http://rhn.redhat.com/errata/RHSA-2016-1847.html [No Types Assigned]

http://rhn.redhat.com/errata/RHSA-2016-1875.html [No Types Assigned]

http://rhn.redhat.com/errata/RHSA-2016-1883.html [No Types Assigned]

https://www.exploit-db.com/exploits/40435/ [No Types Assigned]

https://www.exploit-db.com/exploits/40489/ [No Types Assigned]

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05347541 [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00027.html [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00048.html [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00050.html [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00051.html [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00052.html [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00053.html [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00054.html [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html [No Types Assigned]

http://www.debian.org/security/2016/dsa-3607 [No Types Assigned]

http://www.securityfocus.com/bid/91451 [No Types Assigned]

http://www.securitytracker.com/id/1036171 [No Types Assigned]

http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html

http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html

Configuration 1
     OR
          *cpe:2.3:o:novell:suse_linux_enterprise_workstation_extension:12.0:sp1:*:*:*:*:*:*
          *cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:sp1:*:*:*:*:*:*
          *cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:sp1:*:*:*:*:*:*
          *cpe:2.3:o:novell:suse_linux_enterprise_software_development_kit:12.0:sp1:*:*:*:*:*:*
          *cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:*:*:*:*:*:*:*
          *cpe:2.3:o:novell:suse_linux_enterprise_sof

Configuration 1
     OR
          *cpe:2.3:o:linux:linux_kernel:4.6.2:*:*:*:*:*:*:* (and previous)
Configuration 2
     OR
          *cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
          *cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
          *cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*
          *cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*
Configuration 3
     OR
          *cpe:2.3:o:novell:suse_linux_enterprise_workstation_extension:12.0:sp1:*:*:*:*:*:

http://www.openwall.com/lists/oss-security/2016/09/29/10 No Types Assigned

http://www.openwall.com/lists/oss-security/2016/09/29/10 Third Party Advisory, Exploit

https://github.com/nccgroup/TriforceLinuxSyscallFuzzer/tree/master/crash_reports/report_compatIpt No Types Assigned

https://github.com/nccgroup/TriforceLinuxSyscallFuzzer/tree/master/crash_reports/report_compatIpt Third Party Advisory, Exploit

Configuration 1
     OR
          *cpe:2.3:o:oracle:linux:7.0:*:*:*:*:*:*:*
Configuration 2
     OR
          *cpe:2.3:o:linux:linux_kernel:4.6.2:*:*:*:*:*:*:* (and previous)
Configuration 3
     OR
          *cpe:2.3:o:novell:suse_linux_enterprise_workstation_extension:12.0:sp1:*:*:*:*:*:*
          *cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:sp1:*:*:*:*:*:*
          *cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:sp1:*:*:*:*:*:*
          *cpe:2.3:o:novell:suse_linux_enterprise_s

Configuration 1
     OR
          *cpe:2.3:o:novell:suse_linux_enterprise_workstation_extension:12.0:sp1:*:*:*:*:*:*
          *cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:sp1:*:*:*:*:*:*
          *cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:sp1:*:*:*:*:*:*
          *cpe:2.3:o:novell:suse_linux_enterprise_software_development_kit:12.0:sp1:*:*:*:*:*:*
          *cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:*:*:*:*:*:*:*
          *cpe:2.3:o:novell:suse_linux_enterprise_sof

http://www.openwall.com/lists/oss-security/2016/09/29/10 No Types Assigned

http://www.openwall.com/lists/oss-security/2016/09/29/10 Exploit, Third Party Advisory

https://github.com/nccgroup/TriforceLinuxSyscallFuzzer/tree/master/crash_reports/report_compatIpt No Types Assigned

https://github.com/nccgroup/TriforceLinuxSyscallFuzzer/tree/master/crash_reports/report_compatIpt Exploit, Third Party Advisory

Las implementaciones de setsockopt del compat IPT_SO_SET_REPLACE y IP6T_SO_SET_REPLACE en el subsistema de netfilter en el kernel de Linux en versiones anteriores a 4.6.3 permiten a usuarios locales obtener privilegios o provocar una denegación de servicio (corrupción de memoria) aprovechando el acceso root en contenedor para proveer un valor de desplazamiento manipulado que desencadena un decremento involuntario.

La implementación de setsockopt del compat IPT_SO_SET_REPLACE en el subsistema de netfilter en el kernel de Linux en versiones anteriores a 4.6.3 permite a usuarios locales obtener privilegios o provocar una denegación de servicio (corrupción de memoria) aprovechando un acceso de root en el contenedor para proporcionar un valor de desplazamiento manipulado que desencadena un decremento involuntario.

The compat IPT_SO_SET_REPLACE setsockopt implementation in the netfilter subsystem in the Linux kernel before 4.6.3 allows local users to gain privileges or cause a denial of service (memory corruption) by leveraging in-container root access to provide a crafted offset value that triggers an unintended decrement.

The compat IPT_SO_SET_REPLACE and IP6T_SO_SET_REPLACE setsockopt implementations in the netfilter subsystem in the Linux kernel before 4.6.3 allow local users to gain privileges or cause a denial of service (memory corruption) by leveraging in-container root access to provide a crafted offset value that triggers an unintended decrement.

http://www.openwall.com/lists/oss-security/2016/09/29/10

https://github.com/nccgroup/TriforceLinuxSyscallFuzzer/tree/master/crash_reports/report_compatIpt

Configuration 1
     OR
          *cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
          *cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
          *cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*
          *cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*
Configuration 2
     OR
          *cpe:2.3:o:novell:suse_linux_enterprise_workstation_extension:12.0:sp1:*:*:*:*:*:*
          *cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:sp1:*:*:*:*:*:*
          *cpe:2.3:

Configuration 1
     OR
          *cpe:2.3:o:novell:suse_linux_enterprise_workstation_extension:12.0:sp1:*:*:*:*:*:*
          *cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:sp1:*:*:*:*:*:*
          *cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:sp1:*:*:*:*:*:*
          *cpe:2.3:o:novell:suse_linux_enterprise_software_development_kit:12.0:sp1:*:*:*:*:*:*
          *cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:*:*:*:*:*:*:*
          *cpe:2.3:o:novell:suse_linux_enterprise_sof

http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html No Types Assigned

http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html Third Party Advisory

http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html

Configuration 1
     OR
          *cpe:2.3:o:linux:linux_kernel:4.6.2:*:*:*:*:*:*:* (and previous)

Configuration 1
     OR
          *cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
          *cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
          *cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*
          *cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*
Configuration 2
     OR
          *cpe:2.3:o:novell:suse_linux_enterprise_workstation_extension:12.0:sp1:*:*:*:*:*:*
          *cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:sp1:*:*:*:*:*:*
          *cpe:2.3:

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00060.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00060.html Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00061.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00061.html Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html Third Party Advisory

http://www.ubuntu.com/usn/USN-3016-1 No Types Assigned

http://www.ubuntu.com/usn/USN-3016-1 Third Party Advisory

http://www.ubuntu.com/usn/USN-3016-2 No Types Assigned

http://www.ubuntu.com/usn/USN-3016-2 Third Party Advisory

http://www.ubuntu.com/usn/USN-3016-3 No Types Assigned

http://www.ubuntu.com/usn/USN-3016-3 Third Party Advisory

http://www.ubuntu.com/usn/USN-3016-4 No Types Assigned

http://www.ubuntu.com/usn/USN-3016-4 Third Party Advisory

http://www.ubuntu.com/usn/USN-3017-1 No Types Assigned

http://www.ubuntu.com/usn/USN-3017-1 Third Party Advisory

http://www.ubuntu.com/usn/USN-3017-2 No Types Assigned

http://www.ubuntu.com/usn/USN-3017-2 Third Party Advisory

http://www.ubuntu.com/usn/USN-3017-3 No Types Assigned

http://www.ubuntu.com/usn/USN-3017-3 Third Party Advisory

http://www.ubuntu.com/usn/USN-3018-1 No Types Assigned

http://www.ubuntu.com/usn/USN-3018-1 Third Party Advisory

http://www.ubuntu.com/usn/USN-3018-2 No Types Assigned

http://www.ubuntu.com/usn/USN-3018-2 Third Party Advisory

http://www.ubuntu.com/usn/USN-3019-1 No Types Assigned

http://www.ubuntu.com/usn/USN-3019-1 Third Party Advisory

http://www.ubuntu.com/usn/USN-3020-1 No Types Assigned

http://www.ubuntu.com/usn/USN-3020-1 Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=1349722 No Types Assigned

https://bugzilla.redhat.com/show_bug.cgi?id=1349722 Issue Tracking

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00060.html

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00061.html

http://www.ubuntu.com/usn/USN-3016-1

http://www.ubuntu.com/usn/USN-3016-2

http://www.ubuntu.com/usn/USN-3016-3

http://www.ubuntu.com/usn/USN-3016-4

http://www.ubuntu.com/usn/USN-3017-1

http://www.ubuntu.com/usn/USN-3017-2

http://www.ubuntu.com/usn/USN-3017-3

http://www.ubuntu.com/usn/USN-3018-1

http://www.ubuntu.com/usn/USN-3018-2

http://www.ubuntu.com/usn/USN-3019-1

http://www.ubuntu.com/usn/USN-3020-1

Configuration 1
     OR
          *cpe:2.3:o:linux:linux_kernel:4.6.2:*:*:*:*:*:*:* (and previous)

(AV:L/AC:L/Au:N/C:C/I:C/A:C)

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-264

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ce683e5f9d045e5d67d1312a42b359cb2ab2a13c No Types Assigned

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ce683e5f9d045e5d67d1312a42b359cb2ab2a13c Advisory

https://github.com/torvalds/linux/commit/ce683e5f9d045e5d67d1312a42b359cb2ab2a13c No Types Assigned

https://github.com/torvalds/linux/commit/ce683e5f9d045e5d67d1312a42b359cb2ab2a13c Patch