Name: CVE-2016-8633: Improper Restriction of Operations within the Bounds of a Memory Buffer
Creator: Rapid7
Published: 2016-11-28T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2016-8633, CWE-119, CWE-284, CVSS 6.8, EPSS 0.00927

drivers/firewire/net.c in the Linux kernel before 4.8.7, in certain unusual hardware configurations, allows remote attackers to execute arbitrary code via crafted fragmented packets.

CVSS Details

CVSS 3.1 Base Score: 6.8
CVSS 3.0 Vector: (CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Centos_linux	—	Upgrade kernel-rtUpgrade kernel	Aug 28, 2019	Nov 28, 2016
Debian	—	Upgrade linux	Mar 31, 2017	Nov 27, 2016
Oracle_linux	—	Upgrade kernel-uekUpgrade kernel	Apr 4, 2017	Nov 6, 2016
Redhat_linux	—	Upgrade kernel-rtNo solution existsUpgrade kernel	Apr 11, 2018	Nov 27, 2016
Suse	—	Upgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-ec2-develUpgrade kernel-ec2-extraUpgrade kernel-obs-buildUpgrade kernel-ec2	Dec 9, 2016	Nov 27, 2016
Ubuntu	—	Upgrade linux-image-3.13.0-133-powerpc64-embUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-1042-snapdragonUpgrade linux-image-4.4.0-57-generic-lpaeUpgrade linux-image-raspi2Upgrade linux-image-4.8.0-32-powerpc64-embUpgrade linux-image-4.4.0-1038-raspi2Upgrade linux-image-3.13.0-133-genericUpgrade linux-image-lowlatencyUpgrade linux-image-snapdragonUpgrade linux-image-4.8.0-32-powerpc-smpUpgrade linux-image-genericUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.8.0-32-lowlatencyUpgrade linux-image-4.8.0-32-genericUpgrade linux-image-4.8.0-32-generic-lpaeUpgrade linux-image-3.13.0-133-generic-lpaeUpgrade linux-image-3.13.0-133-powerpc-smpUpgrade linux-image-3.13.0-133-lowlatencyUpgrade linux-image-powerpc64-embUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-57-lowlatencyUpgrade linux-image-3.13.0-133-powerpc-e500Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-57-genericUpgrade linux-image-3.13.0-133-powerpc-e500mcUpgrade linux-image-powerpc-e500Upgrade linux-image-generic-lts-trustyUpgrade linux-image-4.4.0-57-powerpc64-smpUpgrade linux-image-4.4.0-57-powerpc-smpUpgrade linux-image-4.4.0-57-powerpc-e500mcUpgrade linux-image-4.8.0-1021-raspi2Upgrade linux-image-3.13.0-133-powerpc64-smpUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.8.0-32-powerpc-e500mcUpgrade linux-image-generic-lts-xenialUpgrade linux-image-powerpc64-smpUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-57-powerpc64-embUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-powerpc64-smp-lts-xenial	Dec 21, 2016	Nov 27, 2016
Vmware Photon_os	—	Use 'tdnf update' to upgrade all packages to the latest version.	Jan 20, 2025	Nov 28, 2016

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritize with Active Threat Intelligence