Vulnerability Description
The parse_dos_extended function in partitions/dos.c in the libblkid library in util-linux allows physically proximate attackers to cause a denial of service (memory consumption) via a crafted MSDOS partition table with an extended partition boot record at zero offset.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Kernel | Util-Linux | <= 2.28 |
| Redhat | Enterprise Linux Desktop | 7.0 |
| Redhat | Enterprise Linux Eus | 7.3 |
| Redhat | Enterprise Linux Server | 7.0 |
| Redhat | Enterprise Linux Server Aus | 7.3 |
| Redhat | Enterprise Linux Server Tus | 7.3 |
| Redhat | Enterprise Linux Workstation | 7.0 |
| Ibm | Powerkvm | 2.1 |
| Ibm | Power Hardware Management Console | 8.8.6.0 |
References
- http://rhn.redhat.com/errata/RHSA-2016-2605.htmlThird Party Advisory
- http://www-01.ibm.com/support/docview.wss?uid=isg3T1024543Third Party Advisory
- http://www-01.ibm.com/support/docview.wss?uid=nas8N1021801Third Party Advisory
- http://www.openwall.com/lists/oss-security/2016/07/11/2Mailing ListPatchThird Party Advisory
- http://www.securityfocus.com/bid/91683Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1036272Third Party AdvisoryVDB Entry
- https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/commit/?id=7164a1PatchVendor Advisory
- http://rhn.redhat.com/errata/RHSA-2016-2605.htmlThird Party Advisory
- http://www-01.ibm.com/support/docview.wss?uid=isg3T1024543Third Party Advisory
- http://www-01.ibm.com/support/docview.wss?uid=nas8N1021801Third Party Advisory
- http://www.openwall.com/lists/oss-security/2016/07/11/2Mailing ListPatchThird Party Advisory
- http://www.securityfocus.com/bid/91683Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1036272Third Party AdvisoryVDB Entry
- https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/commit/?id=7164a1PatchVendor Advisory
FAQ
What is CVE-2016-5011?
CVE-2016-5011 is a vulnerability with a CVSS score of 4.6 (MEDIUM). The parse_dos_extended function in partitions/dos.c in the libblkid library in util-linux allows physically proximate attackers to cause a denial of service (memory consumption) via a crafted MSDOS pa...
How severe is CVE-2016-5011?
CVE-2016-5011 has been rated MEDIUM with a CVSS base score of 4.6/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2016-5011?
Check the references section above for vendor advisories and patch information. Affected products include: Kernel Util-Linux, Redhat Enterprise Linux Desktop, Redhat Enterprise Linux Eus, Redhat Enterprise Linux Server, Redhat Enterprise Linux Server Aus.