VDB
DEBIAN-CVE-2016-7917
DEBIAN-CVE-2016-7917
PUBLISHED
CVSS 5 MEDIUM
The nfnetlink_rcv_batch function in net/netfilter/nfnetlink.c in the Linux kernel before 4.5 does not check whether a batch message's length field is large enough, which allows local users to obtain sensitive information from kernel memory or cause a denial of service (infinite loop or out-of-bounds read) by leveraging the CAP_NET_ADMIN capability.
Risk Scores
CVSS 3.0
5
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:13 | linux | 0 |
| Debian:14 | linux | 0 |
| Debian:12 | linux | 0 |
Timeline
- Nov 16, 2016 CVE Published
- Sep 22, 2026 CVE Updated