ID:10007 - Exploit for Information exposure in Linux kernel - CVE-2016-4486

 
Main Vulnerability Database Exploits ID:10007 - Exploit for Information exposure in Linux kernel - CVE-2016-4486

ID:10007 - Exploit for Information exposure in Linux kernel - CVE-2016-4486

Published: June 20, 2024


Vulnerability identifier: #VU92463
Vulnerability risk: Low
CVE-ID: CVE-2016-4486
CWE-ID: CWE-200
Exploitation vector: Local access
Vulnerable software:
Linux kernel

Link to public exploit:


Vulnerability description

The vulnerability allows a local user to gain access to sensitive information.

The vulnerability exists due to information exposure error within the rtnl_fill_vfinfo() function in net/core/rtnetlink.c. A local user can gain access to sensitive information.


Remediation

Install update from vendor's repository.