CVE-2016-8395

A denial of service vulnerability in the NVIDIA camera driver could enable an attacker to cause a local permanent denial of service, which may require reflashing the operating system to repair the device. This issue is rated as High due to the possibility of local permanent denial of service. Product: Android. Versions: Kernel-3.10. Android ID: A-31403040. References: N-CVE-2016-8395.

CVSS v3 4.7 MEDIUM
CVSS v2.0 7.1 HIGH

4.7^/10

CVSS v3 : MEDIUM

Vector : AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H

Exploitability : 1.0 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

7.1^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:M/Au:N/C:N/I:N/A:C

Exploitability : 8.6 / Impact : 6.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact COMPLETE

References

Link	Resource
http://nvidia.custhelp.com/app/answers/detail/a_id/4561
http://www.securityfocus.com/bid/94710
https://source.android.com/security/bulletin/2016-12-01.html	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*

History

No history.

Information

Published : 2017-01-12 15:59

Updated : 2017-10-19 01:30

NVD link : CVE-2016-8395

Mitre link : CVE-2016-8395

CVE.ORG link : CVE-2016-8395

JSON object : View

Products Affected

linux

linux_kernel

CWE

NVD-CWE-noinfo

{"id": "CVE-2016-8395", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.1, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:C", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 6.9, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 4.7, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 1.0}]}, "published": "2017-01-12T15:59:01.433", "references": [{"url": "http://nvidia.custhelp.com/app/answers/detail/a_id/4561", "source": "security@android.com"}, {"url": "http://www.securityfocus.com/bid/94710", "source": "security@android.com"}, {"url": "https://source.android.com/security/bulletin/2016-12-01.html", "tags": ["Vendor Advisory"], "source": "security@android.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "A denial of service vulnerability in the NVIDIA camera driver could enable an attacker to cause a local permanent denial of service, which may require reflashing the operating system to repair the device. This issue is rated as High due to the possibility of local permanent denial of service. Product: Android. Versions: Kernel-3.10. Android ID: A-31403040. References: N-CVE-2016-8395."}, {"lang": "es", "value": "Una vulnerabilidad de denegaci\u00f3n de servicio en el controlador de c\u00e1mara NVIDIA podr\u00eda permitir a un atacantes provocar una denegaci\u00f3n local permanente de servicio, que puede requerir reflashing del sistema operativo para reparar el dispositivo. Este problema est\u00e1 calificado como High debido a la posibilidad de denegaci\u00f3n permanente de servicio local. Producto: Android. Versiones: Kernel-3.10. Android ID: A-31403040. Referencias: N-CVE-2016-8395."}], "lastModified": "2017-10-19T01:30:19.677", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"}], "operator": "OR"}]}], "sourceIdentifier": "security@android.com"}