CVE-2016-3672: High severity ubuntu linux vulnerability
A weakness was found in the Linux ASLR implementation. Any user able to running 32-bit applications in a x86 machine can disable the ASLR by setting the RLIMITSTACK resource to unlimited.
External references:
http://hmarco.org/bugs/CVE-2016-3672-Unlimiting-the-stack-not-longer-disables-ASLR.html http://seclists.org/bugtraq/2016/Apr/34
Upstream fix:
http://git.kernel.org/cgit/linux/kernel/git/tip/tip.git/commit/?id=8b8addf891de8a00e4d39fc32f93f7c5eb8feceb
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8b8addf891de8a00e4d39fc32f93f7c5eb8feceb
Other sources
The archpickmmaplayout function in arch/x86/mm/mmap.c in the Linux kernel through 4.5.2 does not properly randomize the legacy base address, which makes it easier for local users to defeat the intended restrictions on the ADDRNORANDOMIZE flag, and bypass the ASLR protection mechanism for a setuid or setgid program, by disabling stack-consumption resource limits.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2016-3672?
CVE-2016-3672 is considered a medium severity vulnerability due to its potential to disable Address Space Layout Randomization (ASLR).
How do I fix CVE-2016-3672?
To fix CVE-2016-3672, ensure your system is updated to a kernel version that includes patches above version 4.5.2 or the specified package versions from Debian.
Which systems are affected by CVE-2016-3672?
CVE-2016-3672 affects multiple versions of Ubuntu Linux and SUSE Linux Enterprise, specifically 32-bit applications running on x86 architecture.
What does CVE-2016-3672 enable an attacker to do?
CVE-2016-3672 allows an attacker to disable ASLR, potentially making it easier to exploit other vulnerabilities in the system.
Is CVE-2016-3672 a local or remote vulnerability?
CVE-2016-3672 is a local vulnerability that requires local user access to exploit.