CVE-2016-0758

Published: 12 May 2016

Integer overflow in lib/asn1_decoder.c in the Linux kernel before 4.6 allows local users to gain privileges via crafted ASN.1 data.

From the Ubuntu security team

Philip Pettersson discovered that the Linux kernel's ASN.1 DER decoder did not properly process certificate files with tags of indefinite length. A local unprivileged attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code with administrative privileges.

Priority

High

CVSS 3 base score: 7.8

Status

Notes

android kernels (flo, goldfish, grouper, maguro, mako and manta) are
not supported on the Ubuntu Touch 14.10 and earlier preview kernels
linux-lts-saucy no longer receives official support
linux-lts-quantal no longer receives official support

References

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0758
• http://www.openwall.com/lists/oss-security/2016/05/12/9
• https://lkml.org/lkml/2016/5/12/270
• https://ubuntu.com/security/notices/USN-2979-4
• https://ubuntu.com/security/notices/USN-2979-2
• https://ubuntu.com/security/notices/USN-2979-1
• https://ubuntu.com/security/notices/USN-2976-1
• https://ubuntu.com/security/notices/USN-2975-2
• https://ubuntu.com/security/notices/USN-2975-1
• https://ubuntu.com/security/notices/USN-2979-3
• https://ubuntu.com/security/notices/USN-2977-1
• https://ubuntu.com/security/notices/USN-2978-3
• https://ubuntu.com/security/notices/USN-2978-2
• https://ubuntu.com/security/notices/USN-2978-1
• NVD
• Launchpad
• Debian

Bugs

• https://bugzilla.redhat.com/show_bug.cgi?id=1300257
• https://launchpad.net/bugs/1581202